"Sandbox" | MrHacker

How to Analyze Malware’s Network Traffic in A Sandbox

Malware analysis encompasses a broad range of activities, including examining the malware’s network traffic. To be effective at it, it’s crucial to...

3.8K

Malware

LummaC2 Malware Deploys New Trigonometry-Based Anti-Sandbox Technique

The stealer malware known as LummaC2 (aka Lumma Stealer) now features a new anti-sandbox technique that leverages the mathematical principle of trigonometry...

2.7K

Vulnerabilities

Researchers Discover Critical Remote Code Execution Flaw in vm2 Sandbox Library

The maintainers of the vm2 JavaScript sandbox module have shipped a patch to address a critical flaw that could be abused to...

4.1K

Vulnerabilities

Critical vulnerability with CVSS score of 10.0 in vm2, the most popular javascript sandbox library, with over 17.5 million downloads monthly

Researchers from Oxeye identified a critical vm2 vulnerability (CVE-2022-36067) that has the highest CVSS score of 10.0. R&D executives, Application security engineers,...

606

Privacy

A critical vulnerability in vm2 Allow a Remote Attacker to Escape The Sandbox

Vm2, a JavaScript sandbox package that receives more than 16 million downloads each month, provides the synchronous execution of untrusted code within...

3.0K

Vulnerabilities

Microsoft Details App Sandbox Escape Bug Impacting Apple iOS, iPadOS, macOS Devices

Microsoft on Wednesday shed light on a now patched security vulnerability affecting Apple’s operating systems that, if successfully exploited, could allow attackers...

4.7K

Malware

Researchers Takeover Unpatched 3rd-Party Antivirus Sandboxes via VirusTotal

Security researchers have disclosed a security issue that could have allowed attackers to weaponize the VirusTotal platform as a conduit to achieve...

4.2K

Malware

How to Build a Custom Malware Analysis Sandbox

Before hunting malware, every researcher needs to find a system where to analyze it. There are several ways to do it: build...

4.4K

Vulnerabilities

Information disclosure vulnerability in FortiSandbox, FortiWeb and FortiADC: Patch immediately

Information security specialists reported the finding of a critical information disclosure vulnerability in multiple Fortinet products, including FortiSandbox, FortiWeb and FortiADC. Tracked...

578

Tutorials

How to open unknown files that have malware in Windows 10 with Sandbox

According to experts in security audits, from the May update of 2019 Windows Sandbox is available for Windows 10 system administrators. This...

205

Articles

Windows Built-in Antivirus Gets Secure Sandbox Mode – Turn It ON

Microsoft Windows built-in anti-malware tool, Windows Defender, has become the very first antivirus software to have the ability to run inside a...

299

Hacked

Windows Defender Is The First Antivirus To Run Inside Sandbox: Here’s How To Enable It

When it comes to defending Windows, Microsoft has never been able to catch up with some of the best antivirus software in the market. However,...

286

Incidents

WINDOWS ZERO-DAY BY SANDBOXESCAPER

Sandboxescaper has shown an new flaw in Windows that make all users vulnerable. Till now Microsoft has not address this issue to...

297

Malware

EMOTET Malware Hijacking the Windows API & Evade the Sandbox Analysis

A wide Spread EMOTET malware emerging again with new stealthy capabilities to hijack the Windows API and evade the sandbox detection which also gives...

238

Incidents

New EMOTET Hijacks a Windows API, Evades Sandbox and Analysis

We discussed the re-emergence of banking malware EMOTET in September and how it has adopted a wider scope since it wasn’t picky about the...

237

Vulnerability Analysis

Fake Sandbox Processes (FSP) – Tool to simulate fake processes of analysis sandbox/VM software

This small script will simulate fake processes of analysis, sandbox and/or VM software that some malware will try to avoid. You can...

208

Articles

Sandboxing support has been added to Firefox for Linux

The Firefox sandboxing innovation confines the browser from the operating system in a way to block web attacks from using a vulnerability...

310

Trojan / Worms

New Banking Trojan IcedID Evade Sandboxes and Performing Web Injection Attacks

A New Banking Trojan dubbed IcedID discovered that capable of performing some dangerous web-based injection attacks also it has some very modern...

321

Hackers Repository

MorphAES – IDPS & SandBox & AntiVirus STEALTH KILLER

DPS & SandBox & AntiVirus STEALTH KILLER. MorphAES is the world’s first polymorphic shellcode engine, with metamorphic properties and capability to bypass...