Reset
168 results
donot team
/ ASERT Team

Donot Team Leverages New Framework

Authors: Dennis Schwarz and Jill Sopko Special thanks to Richard Hummel and Hardik Modi for their contributions on this post. Figure 1: Pakistan themed decoy document Key Findings...

  • Advanced Persistent Threats
  • Analysis
  • Botnets
  • Indicators of Compromise
  • Interesting Research
  • Malware
  • Reverse Engineering
  • threat analysis
Peak Attach Size March 2018
/ Carlos Morales

NETSCOUT Arbor Confirms 1.7 Tbps DDoS Attack; The Terabit Attack Era Is Upon Us

Last week, after Akamai confirmed a 1.3Tbps DDoS attack against Github, I published a blog that looked at the last five years of reflection/amplification attack innovation. I hope...

  • DDoS Tools and Services
  • Vulnerabilities
1 Terabit DDoS Attack
/ Carlos Morales

1 Terabit DDoS Attacks Become a Reality; Reflecting on Five Years of Reflections

Special thanks to Hardik Modi, Steve Siadak and Roland Dobbins for their contributions on this post. Reflection amplification is a technique that allows cyber attackers to both...

  • DDoS Tools and Services
memcached Reflection/Amplification
/ Roland Dobbins

memcached Reflection/Amplification Description and DDoS Attack Mitigation Recommendations

ASERT Threat Summary: memcached Reflection/Amplification Description and DDoS Attack Mitigation Recommendations Date/Time: 27022018 2325UTC Title/Number: memcached Reflection...

  • Analysis
  • Vulnerabilities
tetris
/ ASERT Team

Musical Chairs Playing Tetris

February 20, 2018: This blog has been amended since it was originally published on February 15, 2018. This version removes the association with the APT group responsible for the...

  • Analysis
  • Malware
/ ASERT Team

The ARC of Satori

Authors: Pete Arzamendi, Matt Bing, and Kirk Soluk. Satori, the heir-apparent to the infamous IOT malware Mirai, was discovered by researchers in December 2017. The word "satori"...

  • Attacks and DDoS Attacks
  • Botnets
  • Malware
  • threat analysis
medusa
/ ASERT Team

MedusaHTTP DDoS Slithers Back into the Spotlight

Executive Summary MedusaHTTP is a HTTP-based DDoS botnet written in .NET, that surfaced in early 2017. MedusaHTTP is based off of MedusaIRC which leveraged IRC for its command and...

  • Analysis
  • Botnets
  • DDoS Tools and Services
  • Interesting Research
  • Malware
  • Reverse Engineering
  • threat analysis
  • Uncategorized
/ ASERT Team

Reaper Madness

On October 19 th, a team of security researchers warned of a new IoT Botnet that had already infected “an estimated million organizations” and that was poised to “take down the...

  • Arbor Networks - DDoS Experts
  • Attacks and DDoS Attacks
  • Malware
Snatchloader Login

SnatchLoader Reloaded

Executive Summary SnatchLoader is a “downloader” malware—a type of malware that specializes in distributing (or loading) other malware onto infected computers. We first started...

  • Analysis
  • Botnets
  • Interesting Research
  • Malware
  • Reverse Engineering
  • threat analysis
NETSCOUT Blog
/ ASERT Team

The Flusihoc Dynasty, A Long Standing DDoS Botnet

Since 2015, ASERT has observed and followed a DDoS Botnet named Flusihoc. To date very little has been published about this family, despite numerous anti-virus and intrusion...

  • Analysis
  • Arbor Networks - DDoS Experts
  • ATLAS
  • Attacks and DDoS Attacks
  • Botnets
  • Interesting Research
  • Malware
  • threat analysis
  • Uncategorized
NETSCOUT Blog

The Formidable FormBook Form Grabber

More and more we’ve been seeing references to a malware family known as FormBook. Per its advertisements it is an infostealer that steals form data from various web browsers and...

  • Analysis
  • Botnets
  • Encryption
  • Interesting Research
  • Malware
  • Reverse Engineering
  • threat analysis
NETSCOUT Blog
/ Roland Dobbins

Down to the WireX

Over the course of the last few weeks, a botnet comprised mainly of Android mobile devices has been utilized to launch a high-impact DDoS extortion campaign against multiple...

  • Arbor Networks - DDoS Experts
  • Attacks and DDoS Attacks
  • threat analysis