Remove 2003 Remove Analysis Remove Encryption Remove Libraries
article thumbnail

Buran ransomware-as-a-service continues to improve

Security Affairs

Buran is advertised as a stable malware that uses an offline cryptoclocker , 24/7 support, global and session keys, and has no third-party dependencies such as libraries. “In our analysis we detected two different versions of Buran, the second with improvements compared to the first one released.”

article thumbnail

[SI-LAB] FlawedAmmyy Leveraging Undetected XLM Macros as an Infection Vehicle

Security Affairs

This technology is stored in the Workbook OLE stream in Excel 97-2003 format which makes it very difficult to detect and parse by antivirus (AV) engines. For more details on this finding see the Technical Analysis below. Technical Analysis. Figure 5: Microsoft Excel 97-2003 version identified. macro technology.

article thumbnail

Best Digital Forensics Tools & Software for 2021

eSecurity Planet

While several open-source tools exist for disk and data capture, network analysis, and specific device forensics, a growing number of vendors are building off what’s publicly available. The Sleuth Kit enables administrators to analyze file system data via a library of command-line tools for investing disk images. Volatility.