vx-underground - Other

Home Code Archive ICS SCADA Papers Linux Papers Malware Defense Papers Other Papers Russian Papers The Old New Thing Papers Windows Papers Malware Collections

Advanced Malware

2008-05-18 - Cloaker - Hardware Supported Rootkit Concealment
2008-10-27 - Rootkit-Resistant Disks
2009-06-05 - Defeating Dynamic Data Kernel Rootkit Attacks via VMM-based Guest-Transparent Monitoring
2013-09-03 - UEFI Secure Boot in Modern Computer Security Solutions
2015-10-26 - Kernel Data Attack is a Realistic Security Threat
2017-03-17 - Stealthy Malware Traffic - Not as Innocent as It Looks
2017-08-23 - CloudSkulk - Design of a Nested VM-Based RITM Attack
2017-10-25 - Obfuscation with Mixed Boolean-Arithmetic Expressions - reconstruction, analysis and simplification tools
2019-04-28 - Playing with Namespaces - Writing Docker-Aware Rootkits
2019-08-20 - Virtual Machine Detection In The Browser
2021-09-24 - Obfuscation Defeated - Leveraging electromagnetic signals for malware classification with Deep learning
2021-10-21 - Obfuscation Revealed - Leveraging Electromagnetic Signals for Obfuscated Malware Classification
2021-11-13 - SmashEx - Smashing SGX Enclaves Using Exceptions
2021-11-15 - Design issues of modern EDRs bypassing ETW-based solutions
2021-12-15 - Forensic Issues and Techniques to Improve Security in SSD with Flex Capacity Feature
2022-07-05 - Countering Kernel Rootkits with Lightweight Hook Protection
2022-07-05 - Countering Persistent Kernel Rootkits Through Systematic Hook Discovery
2022-07-13 - Design of a Hypervisor-based Rootkit Detection Method for Virtualized Systems in Cloud Computing Environments

Code Mutation

2023-03-02 - Using GPT to encode and mutate computer viruses entirely in natural language

Internal Components and Analysis

2015-10-22 - Hyper-V Debugging Part 1
2017-10-27 - Hyper-V Debugging Part 2
2019-09-10 - Hyper-V Memory Internals - Guest OS Memory Access

Interviews

Interviewing an anonymous Ransomware Operator (RWO)
Interviewing the Lockbit Administrator
Interviewing the organizer for URSNIF banking trojan

MacOS VX

2009-07-25 - Advanced Mac OS X Rootkits
2014-09-24 - Methods of Malware Persistence on Mac OS X
2016-05-06 - Revisiting Mac OS X Kernel Rootkits
2018-01-17 - Leveraging Emond on macOS For Persistence
2019-03-15 - Code injection on macOS
2021-03-14 - Beyond the good ol LaunchAgents - 001 - shell startup files
2021-03-16 - Beyond the good ol LaunchAgents - 002 - iTerm2 startup
2021-03-17 - Beyond the good ol LaunchAgents - 003 - Login Items
2021-03-18 - Beyond the good ol LaunchAgents - 004 - cron jobs
2021-03-20 - Beyond the good ol LaunchAgents - 005 - Pluggable Authentication Modules PAM
2021-03-21 - Beyond the good ol LaunchAgents - 006 - SSHRC
2021-03-22 - Beyond the good ol LaunchAgents - 007 - xbar plugins
2021-03-23 - Beyond the good ol LaunchAgents - 008 - Hammerspoon
2021-03-25 - Beyond the good ol LaunchAgents - 009 - Preference Pane
2021-04-02 - Beyond the good ol LaunchAgents - 010 - Application script files
2021-04-03 - Beyond the good ol LaunchAgents - 011 - Spotlight Importers
2021-04-05 - Beyond the good ol LaunchAgents - 012 - QuickLook Plugins
2021-04-19 - Beyond the good ol LaunchAgents - 013 - Audio Plugins
2021-04-27 - Beyond the good ol LaunchAgents - 014 - atrun
2021-05-12 - Beyond the good ol LaunchAgents - 015 - xsanctl
2021-05-30 - Beyond the good ol LaunchAgents - 016 - Screen Saver
2021-05-31 - Beyond the good ol LaunchAgents - 017 - Color Pickers
2021-06-28 - Beyond the good ol LaunchAgents - 018 - X11 and XQuartz
2021-08-06 - Beyond the good ol LaunchAgents - 019 - Periodic Scripts
2021-09-22 - Beyond the good ol LaunchAgents - 020 - Terminal Preferences
2021-10-12 - Beyond the good ol LaunchAgents - 021 - Re-opened Applications
2021-11-24 - Beyond the good ol LaunchAgents - 022 - LoginHook and LogoutHook
2021-11-27 - Beyond the good ol LaunchAgents - 023 - emond The Event Monitor Daemon
2021-12-02 - Beyond the good ol LaunchAgents - 024 - Folder Actions
2021-12-15 - Beyond the good ol LaunchAgents - 025 - Apache2 modules
2022-02-05 - Beyond the good ol LaunchAgents - 026 - Finder Sync Plugins
2022-02-08 - Beyond the good ol LaunchAgents - 027 - Dock shortcuts
2022-02-09 - Beyond the good ol LaunchAgents - 028 - Authorization Plugins
2022-03-08 - Beyond the good ol LaunchAgents - 029 - amstoold

Mobile VX

2014-01-05 - Android Rootkits
2015-12-03 - A Monte Carlo method for the spread of mobile malware
2018-10-07 - A New Mobile Malware Classification for Audio Exploitation
2020-04-07 - Infecting Android Applications The New Way
2020-08-19 - Zecorder - Demonstrating screen recording capabilities on Android
2021-12-30 - Analysis of Mobile Malware A Systematic Review of Evolution and Infection Strategies
2022-01-04 - Persistence without Persistence - Meet The Ultimate Persistence Bug - NoReboot

VXUG Zines

2022-11-13 - Black Mass Halloween 2022
2022-12-04 - About malware writing and how to start

Other VXUG Links

Official vx-underground Twitter

Official vx-underground Threat Intelligence feed

Contact & Compliance Email

Donate to vx-underground

Support vx-underground monthly

Buy vx-underground Merchandise

Contents

Advanced Malware
Code Mutation
Internal Components and Analysis
Interviews
MacOS VX
Mobile VX
VXUG Zines

Sponsor

sponsor

World's Best Penis Enhancement Pills

Sponsor

sponsor

Execute your malware here

Sponsor

sponsor

Tutorial from zetalytics.com

Sponsor

sponsor

Phantom Overlay, the best COD cheat available!

Want to sponsor vx-underground?

Your information could go here