-
Threat actor intend to stop your antivirus program – 2018
Just heard that there is a new attack method use by ransomware. The malware intend to stop and disable your workstation antivirus process. Since no antivirus protection, threat actor is free to do their task. Perhaps the defense vendor pay the focus on Ring 0 attack (kernel). Meanwhile new generation AV software implement behavioral detection…
-
Remediation step – Saturn Ransomware
Preface: Can we saying this? it is Google Adwords design flaw? It lure the threat actors go through this service to spread malware from Google search engine. Quick note: Saturn ransomware found this month (Feb 2018). It looks strange that attack victim only on physical machine instead of Virtual Machine. Why? Does the threat actor…