Port 22

~ 8 Aug 2019 ~

Finding Evil in Windows 10 Compressed Memory, Part Two: Virtual Store Deep Dive

~ 5 Jun 2019 ~

Government Sector in Central Asia Targeted With New HAWKBALL Backdoor Delivered via Microsoft Office Vulnerabilities

~ 30 May 2019 ~

Framing the Problem: Cyber Threats and Elections

~ 29 May 2019 ~

Learning to Rank Strings Output for Speedier Malware Analysis

~ 28 May 2019 ~

Network of Social Media Accounts Impersonates U.S. Political Candidates, Leverages U.S. and Israeli Media in Support of Iranian Interests

~ 16 Apr 2019 ~

Spear Phishing Campaign Targets Ukraine Government and Military; Infrastructure Reveals Potential Link to So-Called Luhansk People's Republic

~ 15 Apr 2019 ~

FLASHMINGO: The FireEye Open Source Automatic Analysis Tool for Flash

~ 9 Apr 2019 ~

Churning Out Machine Learning Models: Handling Changes in Model Predictions

~ 26 Mar 2019 ~

WinRAR Zero-day Abused in Multiple Campaigns

~ 15 Mar 2019 ~

Dissecting a NETWIRE Phishing Campaign's Usage of Process Hollowing

~ 13 Mar 2019 ~

Breaking the Bank: Weakness in Financial AI Applications

~ 28 Feb 2019 ~

FLARE Script Series: Recovering Stackstrings Using Emulation with ironstrings

~ 12 Dec 2018 ~

FLARE Script Series: Automating Objective-C Code Analysis with Emulation

~ 20 Nov 2018 ~

Cmd and Conquer: De-DOSfuscation with flare-qdb

~ 13 Sep 2018 ~

Bypassing Antivirus for Your Antivirus Bypass

Bypassing Antivirus for Your Antivirus Bypass

~ 8 Aug 2018 ~

BIOS Boots What? Finding Evil in Boot Code at Scale!

~ 18 Jul 2018 ~

How the Rise of Cryptocurrencies Is Shaping the Cyber Crime Landscape: The Growth of Miners

~ 28 Jun 2018 ~

RIG Exploit Kit Delivering Monero Miner Via PROPagate Injection Technique

~ 29 May 2018 ~

Remote Authentication GeoFeasibility Tool - GeoLogonalyzer

~ 24 Apr 2018 ~

Metamorfo Campaigns Targeting Brazilian Users

~ 23 Apr 2018 ~

Loading Kernel Shellcode

~ 10 Apr 2018 ~

Solving Ad-hoc Problems with Hex-Rays API

~ 5 Apr 2018 ~

Fake Software Update Abuses NetSupport Remote Access Tool

~ 23 Mar 2018 ~

SANNY Malware Delivery Method Updated in Recently Observed Attacks

~ 15 Feb 2018 ~

CVE-2017-10271 Used to Deliver CryptoMiners: An Overview of Techniques Used Post-Exploitation and Pre-Mining

~ 3 Feb 2018 ~

Attacks Leveraging Adobe Zero-Day (CVE-2018-4878) Threat Attribution, Attack Scenario and Recommendations

~ 17 Jan 2018 ~

Microsoft Office Vulnerabilities Used to Distribute Zyklon Malware in Recent Campaign

~ 11 Jan 2018 ~

FLARE IDA Pro Script Series: Simplifying Graphs in IDA

~ 30 Oct 2017 ~

Introducing GoCrack: A Managed Password Cracking Tool

~ 23 Oct 2017 ~

New FakeNet-NG Feature: Content-Based Protocol Detection

~ 5 Jul 2017 ~

Introducing Linux Support for FakeNet-NG: FLAREs Next Generation Dynamic Network Analysis Tool

~ 21 Jun 2017 ~

Remote Symbol Resolution

~ 17 Apr 2017 ~

Writing a libemu/Unicorn Compatability Layer

~ 31 Mar 2017 ~

Introducing Monitor.app for macOS

~ 22 Feb 2017 ~

Spear Phishing Techniques Used in Attacks Targeting the Mongolian Government

~ 9 Jan 2017 ~

Credit Card Data and Other Information Targeted in Netflix Phishing Campaign

~ 4 Jan 2017 ~

FLARE Script Series: Querying Dynamic State using the FireEye Labs Query-Oriented Debugger (flare-qdb)

~ 30 Nov 2016 ~

One-Stop Shop Phishing Domain Targets Information from Customers of Several Indian Banks

~ 9 Nov 2016 ~

Extending Linux Executable Logging With The Integrity Measurement Architecture

Extending Linux Executable Logging With The Integrity Measurement Architecture

~ 20 Oct 2016 ~

Rotten Apples: Resurgence

~ 18 Jul 2016 ~

Cerber: Analyzing a Ransomware Attack Methodology To Enable Protection

~ 24 Jun 2016 ~

Locky is Back Asking for Unpaid Debts

~ 7 Jun 2016 ~

Rotten Apples: Apple-like Malicious Phishing Domains

~ 2 Jun 2016 ~

IRONGATE ICS Malware: Nothing to See Here...Masking Malicious Activity on SCADA Systems

~ 25 Mar 2016 ~

Surge in Spam Campaign Delivering Locky Ransomware Downloaders

Surge in Spam Campaign Delivering Locky Ransomware Downloaders

~ 11 Mar 2016 ~

A Growing Number of Android Malware Families Believed to Have a Common Origin: A Study Based on Binary Code

~ 18 Feb 2016 ~

Maimed Ramnit Still Lurking in the Shadow

~ 9 Feb 2016 ~

FLARE Script Series: flare-dbg Plug-ins

~ 27 Jan 2016 ~

Hot or Not? The Benefits and Risks of iOS Remote Hot Patching

~ 28 Dec 2015 ~

FLARE Script Series: Automating Obfuscated String Decoding

~ 16 Nov 2015 ~

FLARE IDA Pro Script Series: Automating Function Argument Extraction

~ 4 Nov 2015 ~

iBackDoor: High-Risk Code Hits iOS Apps

~ 3 Nov 2015 ~

XcodeGhost S: A New Breed Hits the US

~ 26 Oct 2015 ~

iBackDoor: High-risk Code Sneaks into the App Store

~ 8 Sep 2015 ~

2015 FLARE-ON Challenge Solutions

~ 8 Aug 2015 ~

Windows Management Instrumentation (WMI) Offense, Defense, and Forensics

~ 19 Jul 2015 ~

Second Adobe Flash Zero-Day CVE-2015-5122 from HackingTeam Exploited in Strategic Web Compromise Targeting Japanese Victims

~ 30 Jun 2015 ~

Three New Masque Attacks against iOS: Demolishing, Breaking and Hijacking

~ 17 Jun 2015 ~

June 2 6/12/2015 Consulting Thought Leadership "Proactively Engaged Questions Executives Should Ask Their Security Teams " "-Many breaches occur as a result of executive decisions made w/out full knowledge of the people/processes needed to prevent them; -Offers specific questions that execs should ask to understand and prevent a breach" Jim Aldridge Kyrk Content Finalized Global June 2 6/12/2015 Consulting Thought Leadership "Proactively Engaged Questions Executives Should Ask Their Security Teams " "-Many breaches occur as a result of executive decisions made w/out full knowledge of the people/processes needed to prevent them; -Offers specific questions that execs should ask to understand and prevent a breach" Jim Aldridge Kyrk Content Finalized GlobCaching Out: The Value of Shimcache for Investigators

~ 23 May 2015 ~

NitlovePOS: Another New POS Malware

~ 19 Feb 2015 ~

iOS Masque Attack Revived: Bypassing Prompt for Trust and App URL Scheme Hijacking

~ 14 Oct 2014 ~

Two Limited, Targeted Attacks; Two New Zero-Days