Home – Malware Traffic Analysis –

This post documents three recently disclosed vulnerabilities in pfSense.All vulnerabilities discussed in this post were responsibly disclosed to Netgate between November and December 2024. As of publication, more than 150 days have passed since initial...

Setting up a DNS Firewall on steroids
The idea is to setup a local Bind recursive DNS server to improve the overall security of a network by filtering known nasty domains. This is done by first configuring RPZ with multiple lists of domains/IPs to block, then using the python script I developed...

Following a Malware distribution campaign that uses ExploitKit
Background
Exploit Kits are a common threat that faces users, they are widely deployed on legitimate websites, and malicious authors are using it to distribute their malware. They can push a broad range of dangerous software. In this research, we look for more...

A glimpse inside CryptoWall 3.0
Background
CryptoWall is known to be one the most popular ransomware. The FBI says it has received 992 complaints about CryptoWall, with victims reporting losses of $18m. Symantec also said that ransomware attacks have more than doubled in 2014 from 4.1 million...