Remove tag antivirus
article thumbnail

Abusing Windows Container Isolation Framework to avoid detection by security products

Security Affairs

Because we can override files using the IO_REPARSE_TAG_WCI_1 reparse tag without the detection of antivirus drivers, their detection algorithm will not receive the whole picture and thus will not trigger.” Scan files with the tag in the PRE_CLEANUP function even if they were not altered. ” continues the report.

Security 125
article thumbnail

North Korea-linked hackers target security experts again

Security Affairs

Researchers from Google’s Threat Analysis Group (TAG) reported that North Korea-linked hackers are targeting security researchers via social media. Experts identified two accounts impersonating recruiters for antivirus and security companies. ” reads the post published by Google TAG.

Security 102
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

North Korea-linked Zinc group posed as Samsung recruiters to target security firms

Security Affairs

North Korea-linked APT group posed as Samsung recruiters is a spear-phishing campaign that targeted South Korean security companies that sell anti-malware solutions, Google TAG researchers reported. Google TAG researchers reported that the same group, tracked as Zinc ,” also targeted security researchers in past campaigns.

Security 132
article thumbnail

Sandboxing: Advanced Malware Analysis in 2021

eSecurity Planet

Antivirus protection isn’t enough to protect against today’s advanced threats. Malware isn’t going away and even advanced monitoring and antivirus software can’t always catch what a malicious program will do when executed. Antivirus software is notable for its ability to scan programs being transferred, downloaded, and stored.

article thumbnail

Mar 13- Mar 19 Ukraine – Russia the silent cyber conflict

Security Affairs

Google’s TAG team revealed that China-linked APT groups are targeting Ukraine ’s government for intelligence purposes. March 15 – The German BSI agency recommends replacing Kaspersky antivirus software. This post provides a timeline of the events related to the Russia invasion of Ukraine from the cyber security perspective.

Cloud 93
article thumbnail

Microsoft: North Korea-linked Zinc APT targets security experts

Security Affairs

Microsoft, like Google TAG, observed a cyber espionage campaign aimed at vulnerability researchers that attributed to North Korea-linked Zinc APT group. ” This week, Google Threat Analysis Group (TAG) also warned of North Korea-linked hackers targeting security researchers through social media.

Security 121
article thumbnail

How to Implement Microsegmentation

eSecurity Planet

Success in implementing microsegmentation for your organization means tagging traffic, servicing regular business communications, adapting to threats , and denying all other anomalies. . All traffic is known, tagged, or verified, preventing any potential vulnerabilities related to trust. . Tag Your Workloads.