Blog

Specialized blog with informative contents destined to a public with marked technical profile, in order to improve knowledge and create a culture about the security in Internet.

Post related to: Malware

Emotet: characteristics and operation

In this post, an office document, a .doc file with macros, will be analyzed through the static and dynamic analysis of the sample in a controlled environment, in order to identify the actions carried out by the Emotet malware.

Tags: 

Cybercrime

Data protection

Firewall

Forensics

Incident

Malware

Phishing

Rootkit

Social engineering

Threats

Ekans ransomware: prevention, detection and response

This post presents some lines of action to be followed in the case of having fallen victim to Ekans ransomware. It describes in detail the prevention, identification and response phases to be carried out.

Tags: 

Continuity

Critical infrastructures

Cryptography

Cybercrime

Incident

Industrial Control System

Linux

Malware

SCADA

Threats

Virtualization

INCIBE-CERT technical webinars

With the aim of increasing cybersecurity knowledge, INCIBE-CERT has published a series of webinars in video format, so that, in a light and entertaining way, knowledge and technical aspects of cybersecurity can be expanded in various areas of interest, for both INCIBE-CERT's technical audience and anyone interested in cybersecurity.

Tags: 

Bastioning procedures

Best practices

Forensics

Identity management

IDS/IPS

Linux

Malware

Networking

Pentesting

Phishing

Safe development

Social engineering

Threat intelligence

Wireless

Ekans ransomware: features and operation

In this new blog entry, we will analyze the features and describe the operation of a new ransomware called Ekans, initially known as Snake, which has a very specific design, aimed at infecting and blocking Industrial Control Systems (ICS).

Tags: 

Continuity

Critical infrastructures

Cryptography

Cybercrime

Incident

Industrial Control System

Linux

Malware

SCADA

Threats

Virtualization

Sodinokibi: prevention, identification and response

Sodinokibi uses the RaaS (Ramsonware as a Service) model, which favours its rapid spread. In this article we present some lines of action that should be followed in the case of having been a victim of this sophisticated malware or if it is suspected that it could have infected our systems.

Tags: 

Continuity

Cryptography

Cybercrime

Malware

Threats

Windows

NetWalker ransomware: analysis and preventative measures

In the last few days there have been various reports, both nationally and internationally, of a ransomware campaign called NetWalker, also known as Mailto or Koko, which appears to target healthcare centers, taking advantage of the current state of alarm declared as a result of the COVID-19 pandemic.

Tags: 

#CyberCOVID19

Continuity

Cryptography

Cybercrime

Malware

Threats

Sodinokibi: features and operation

The ransomware attacks have experienced a great evolution from its beginnings, being able to identify a great amount of different families at the present time, many of them are highly sophisticated, with high propagation and persistence. In this blog we explain what is Sodinokibi and how it works.

Tags: 

Continuity

Cryptography

Cybercrime

Malware

Threats

Windows

Smart cars: are they prepared for threats?

Over the years, the automotive sector has been growing and evolving technologically. During this time, different deficiencies or vulnerabilities in smart cars have been discovered. For this reason, one of the key issues for this new type of vehicle is protection against possible threats.

Tags: 

Incident

Malware

Networking

Smart Grid

Threats

Emerging Threats to Industrial Control Systems

Over recent years we have witnessed how industrial controls systems are not exempt from being targeted for cyberattacks. In this article we look back at threats detected in recent years to see how we can defend ourselves against them.

Tags: 

Incident

Industrial Control System

Malware

Threats

Cryptocurrency and its role in malware

It is increasingly common to find malware related to cryptocurrencies, either to use them as payment currency in extortions and illegal activities, cryptocurrency theft or infiltrate on systems and equipment from all areas to take advantage of the resources of the victims' equipment to undermine cryptocurrency

Tags: 

Cybercrime

Malware

Pages

• First
• «
• 1 actual
• 2
• 3
• »
• Last