ZeroAccess, an innovative malware
Hi All! Recently I stumbled upon the new ZeroAccess dropper. In the “KernelMode.info” community, on the 3rd January 2016, R136a1 has posted the new sample. The dropper is quite innovative.…
The next gen OS – Windows 10
Hi All! Before starting, I would like to say that, as usual, all the thoughts and info inside this post are my opinions and don’t belong to my company. Tomorrow…
NoSuchCon 2014 – Windows 8.1 Kernel Patch Protection
Hi All! After 6 months of inactivity I found the time to update my blog. Today I would like to speak about the last NoSuchCon Conference in Paris, where I…
A new Adventure
Hi All! I am proud to annunce that, starting form 10th March 2014, I have started a new Job. I am a Security Engineer (this time without “Senior” adjective unfortunately)…
X64 Memory segmentation – Is the game over?
In these days that I was currently quite free, I have took the occasion to deepen a feature of all X64 systems… Indeed last month, when I was analysing a…
Anatomy of a new 64 bit file infector
Hi all! I am still alive 🙂 . I am proud to release here my last analysis about a multi-architecture file infector. It’s name is Expiro. This analysis is the…
We are returning back
Hi All! How are you? I am here, due to some company politic decisions I haven’t updated this blog for a long time… I am now working on a new…
Windows 8 Security – AppContainer Sandbox
Hi All! I’m happy to introduce here the result of my last 2 months of work. I have indeed finished my big analysis on Windows 8 AppContainers. The 14 pages…
NosuchCon Conference – Final day
Hi! This day of NoSuchCon conference was very exiting. Unfortunately was the last one… I woke up quite early this morning, after a great Conference party organized the evening before…
NosuchCon – Day 2
Hi all! This day was the second one, attending NosuchCon conference…. In the morning we have seen a good analysis on a new kind of BIOS rootkit, able to resist…