Latest Code Analysis news

CISA: Most critical open source projects not using memory safe code

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published research looking into 172 key open-source projects and whether they are susceptible to memory flaws.
- Bill Toulas
- June 26, 2024
- 01:56 PM
- 6
RansomHub extortion gang linked to now-defunct Knight ransomware

Security researchers analyzing the relatively new RansomHub ransomware-as-a-service believe that it has evolved from the currently defunct Knight ransomware project.
- Bill Toulas
- June 05, 2024
- 08:39 AM
- 0
Google Play Protect adds real-time scanning to fight Android malware

Google has announced new, real-time scanning features for Google Play Protect that make it harder for malicious apps employing polymorphism to evade detection.
- Bill Toulas
- October 18, 2023
- 12:00 PM
- 3
Thousands of Android APKs use compression trick to thwart analysis

Threat actors increasingly distribute malicious Android APKs (packaged app installers) that resist decompilation using unsupported, unknown, or heavily tweaked compression algorithms.
- Bill Toulas
- August 17, 2023
- 10:51 AM
- 1
VirusTotal AI code analysis expands Windows, Linux script support

Google has added support for more scripting languages to VirusTotal Code Insight, a recently introduced artificial intelligence-based code analysis feature.
- Sergiu Gatlan
- May 15, 2023
- 03:54 PM
- 0
VirusTotal now has an AI-powered malware analysis feature

VirusTotal announced on Monday the launch of a new artificial intelligence-based code analysis feature named Code Insight.
- Sergiu Gatlan
- April 24, 2023
- 05:56 PM
- 3
Python info-stealing malware uses Unicode to evade detection

A malicious Python package on PyPI uses Unicode as an obfuscation technique to evade detection while stealing and exfiltrating developers' account credentials and other sensitive data from compromised devices.
- Bill Toulas
- March 23, 2023
- 11:09 AM
- 0
New stealthy 'Beep' malware focuses heavily on evading detection

A new stealthy malware named 'Beep' was discovered last week, featuring many features to evade analysis and detection by security software.
- Bill Toulas
- February 14, 2023
- 09:44 AM
- 1
Entropy ransomware linked to Evil Corp's Dridex malware

Analysis of the recently-emerged Entropy ransomware reveals code-level similarities with the general purpose Dridex malware that started as a banking trojan.
- Ionut Ilascu
- February 23, 2022
- 08:34 AM
- 0
Malware campaigns deliver payloads via obscure paste service

Multiple malware campaigns have been spotted using Pastebin-style services to facilitate their nefarious activities. Instead of delivering payload from a dedicated Command-and-Control (C&C) server, paste sites enable attackers to hide their malicious code in plain sight.
- Ax Sharma
- October 06, 2020
- 11:20 AM
- 2
A First Look at the North Korean Malware Family Tree

Security researchers have analyzed malware samples from threat actors associated with North Korea and discovered connections with tools from older unattributed campaigns.
- Ionut Ilascu
- August 09, 2018
- 09:34 AM
- 0