Fox-IT International blog

Decrypting Full Disk Encryption with Dissect

5 months ago

Author: Guus Beckers Back in 2022 Fox-IT decided to open source its...

Red Teaming in the age of EDR: Evasion of Endpoint Detection Through Malware Virtualisation

7 months ago

Authors: Boudewijn Meijer && Rick Veldhoven Introduction As defensive security products improve,...

Sifting through the spines: identifying (potential) Cactus ransomware victims

about 1 year ago

Authored by Willem Zeeman and Yun Zheng Hu This blog is part...

Android Malware Vultur Expands Its Wingspan

about 1 year ago

From Backup to Backdoor: Exploitation of CVE-2022-36537 in R1Soft Server Backup Manager

about 2 years ago

During a recent incident response case, we found traces of an adversary...

Threat spotlight: Hydra

about 2 years ago

This publication is part of our Annual Threat Monitor report that was...

CVE-2022-27510, CVE-2022-27518 – Measuring Citrix ADC & Gateway version adoption on the Internet

over 2 years ago

Authored by Yun Zheng Hu Recently, two critical vulnerabilities were reported in...

One Year Since Log4Shell: Lessons Learned for the next ‘code red’

over 2 years ago

Authored by Edwin van Vliet and Max Groot One year ago, Fox-IT...

I’m in your hypervisor, collecting your evidence

over 2 years ago

Authored by Erik Schamper Data acquisition during incident response engagements is always...

Sharkbot is back in Google Play

over 2 years ago

Authored by Alberto Segura (main author) and Mike Stokkel (co-author) Introduction After...

Detecting DNS implants: Old kitten, new tricks – A Saitama Case Study

over 2 years ago

Max Groot & Ruud van Luijk TL;DR A recently uncovered malware sample...

Flubot: the evolution of a notorious Android Banking Malware

almost 3 years ago

Authored by Alberto Segura (main author) and Mick Koomen (co-author) Summary Flubot...