Endpoint March 20, 2023

When the Absence of Noise Becomes Signal: Defensive Considerations for Lazarus FudModule

7 min read - In February 2023, X-Force posted a blog entitled “Direct Kernel Object Manipulation (DKOM) Attacks on ETW Providers” that details the capabilities of a sample attributed to the Lazarus group leveraged to impair visibility of the malware’s operations. This blog will…

March 14, 2018

Nearly 100 Organizations Victimized by ‘Highly Sophisticated’ Slingshot APT Since 2012

2 min read - According to recent research, Slingshot APT has victimized nearly 100 organizations since 2012 using kernel-level privileges to load malware and evade detection.

October 20, 2017

Security Vulnerability Puts Linux Kernel at Risk

2 min read - A security vulnerability in the Linux kernel could allow external attackers to escalate privileges and execute malicious code.

June 27, 2017

GhostHook Attack Reveals Kernel-Level Threat in 64-Bit Windows Systems

2 min read - Researchers discovered a haunting technique they're calling a GhostHook attack, which uses a feature in Intel CPUs to take over 64-bit Windows.

Malware June 4, 2015

Detecting and Analyzing Kernel-Based Malware

3 min read - The intricacies of kernel-based malware make it difficult for security teams to identify potential problems, but the task is not impossible.