Evasive JScript
ON Nov 3, 2016
One of the characteristics of malware that we follow closely is its use of evasion techniques; that is, techniques that...
Lastline Labs Blog
Insights From Lastline Labs Research and Development
Party like it’s 1999: Comeback of VBA Malware Downloaders [Part 2]
ON Oct 6, 2016
Authored by: Alexander Sevtsov, and Arunpreet Singh Find more details on this series in Part 1 and Part 3. The use of malicious...
Building Static and Dynamic Analyses Using Lastline’s Process Snapshotting
ON Sep 16, 2016
Learn how Lastline’s process snapshotting supports malware analysis by capturing snapshots at various points throughout a malware program’s execution, allowing...
Party like it’s 1999: Comeback of VBA Malware Downloaders [Part 1]
ON Aug 31, 2016
Authored by: Alexander Sevtsov, and Arunpreet Singh Find more details on this series in Part 2 and Part 3. Macro malware, introduced back...
Hunting for Ransomware with LLKB
ON Aug 11, 2016
Leveraging the new clustering feature of the Lastline Knowledge Base to study recent ransomware threats Authored by: Grégoire Jacob and Stefano...
Lastline: It’s as easy as A-P-I
ON Apr 18, 2016
Lastline’s solutions analyze network traffic, programs, documents, and other artifacts to identify and block advanced malware in enterprise networks. ...
ModPOS: A Framework Lurking in Point-of-Sale System Kernels
ON Apr 7, 2016
Authored by: Subrat Sarkar, Arunpreet Singh, and Clemens Kolbitsch Diving deeply into the ModPOS malware framework using sandbox process snapshotting Point-of-sale (POS)...
Three interesting changes in malware activity over the past year
ON Mar 31, 2016
Every day, our Lastline sensors observe millions of files that our customers download from the Internet or receive as email...
A Peek Behind the Cryptowall
ON Jan 28, 2016
Bridging static and dynamic analysis using Lastline process snapshotting Authored by: Arunpreet Singh and Dr. Christopher Kruegel ...
Defeating Darkhotel Just-In-Time Decryption
ON Nov 5, 2015
Authored by: Arunpreet Singh and Clemens Kolbitsch The use of runtime-packing of malware has long become the standard to defeat traditional AV products. At...