はてなブックマーク

If you want to make enemies, try to change something. Just found another vulnerable variable on the latest SpyEye frmcp, possibility to upload a shell (as usual on SpyEye) take infos from db etc.. This vulnerability is weak, i don't really care of publishing it. There is ALOT of others way to get into latest panels. Anyway, that short (and lame) to make a post just for that, so let's talk about so

Guys of JPCERT, 有難う御座います！ Released an update to their Citadel decrypter to make it compatible with 0.0.1.1 sample. Citadel 0.0.1.1 don't have a lot of documentation, so time as come to talk about it. Personally i know this malware under the name 'Atmos' (be ready for name war in 3,2,1...) The first sample i was aware is the one spotted by tilldenis here in jully 2015. I re-observed this campaign i