Remove tag
Remove Blog Remove Examples Remove Ransomware Remove Retail
article thumbnail

TA505 Cybercrime targets system integrator companies

Security Affairs

For example the theseus function is obfuscated with “divine terms”, one of my favorite was actually the following conditional branch: If pastorale / quetzalcoatl < 57 Then …, which actually was always true ! The used infrastructure, by analyzing the dropping urls, looks like an old infrastructure used for propagating Ransomware.