Explore our blog

Intezer Analyze community detections from June included BlackSquid, RobinHood ransomware, Pacifier APT and Linux threats HiddenWasp and GreedyAntd.

The integration between Intezer Analyze™ and IBM Resilient enables users of both platforms to enrich their incident response with Genetic Malware Analysis.

Malware with strong evasion techniques do exist within the Linux platform. There is a high ratio of publicly available open-source malware that utilize strong evasion techniques and can be easily adapted by adversaries.

In part four of our ELF 101 blog series, we explain the dynamic linking process, including its purpose, how it works and the different linking modes.

Intezer Analyze community detections in May include malware from Chinese threat actor groups APT3, ChinaZ and APT10, and an endpoint infected with Nanocore.

Intezer has discovered a new, sophisticated malware named HiddenWasp, targeting Linux systems. Unlike common Linux malware, HiddenWasp is not focused on crypto-mining or DDoS activity, but rather it is a trojan purely used for targeted remote control.

The Pacha Group is disabling previously installed cryptominers from other threat groups on the cloud, most notably Rocke Group, in order to obtain the largest foothold of computing power on the cloud for conducting malicious crypto-mining activities.

The Pacha Group is disabling previously installed cryptominers from other threat groups on the cloud, most notably the Rocke Group, in order to obtain the largest foothold of computing power on the cloud for conducting malicious crypto-mining activities.

Get to know Intezer Analyze community manager Shaul Holtzman. Shaul is a former cybersecurity analyst helping organizations detect and classify advanced cyber threats.

Memory forensics are crucial for detecting fileless malware. The new Intezer endpoint analysis solution analyzes code in memory to detect advanced threats.

A technical analysis of Linux.Greedy.Antd, a cryptominer employed by Pacha Group to compromise third party Linux servers. The malware was undetected by all leading engines, demonstrating the sophistication of this threat.

Announcing the release of an API for the Intezer Analyze community edition. Members of the free community can now create automation scripts to analyze files without manual intervention. Highlighted in this blog are some of the ways in which community users can utilize the API.

Software is evolutionary. Intezer has introduced a new innovative approach to automate malware analysis and provide clear insights into any suspicious file. The company's Genetic Malware Analysis technology empowers security teams to improve and accelerate all stages of their incident response, from the initial alert to the final step of remediation.

Distributed denial-of-service (DDoS) attacks were on the rise in 2018. Chinese threat actors in particular have predominantly deployed DDoS attacks in their cyber campaigns, and China has emerged has having one of the highest rates of DDoS attacks. This blog provides a technical analysis highlighting connections between ChinaZ and other notable Chinese threat actor groups in the current DDoS landscape.

The Muhstik botnet was first exposed by Netlab360 researchers in May 2018. This botnet targeted mainly GPON routers. At Intezer we found that Muhstik is extending its spectrum of compromised devices by targeting web servers hosting phpMyAdmin.