You get a CVE and you get a CVE and all get Ransomware Through IE!
Kind of crappy for malware analysts cos it will require some work to set up an environment but what an easy way to evade getting infected
On theory it sounds good, let's see if it proves to be =]
Lately I've came across ads such as "Make your own web page in just less than 6 weeks!" <- Looks like a scary ad to me
I am not sure if its possible but if you could allow access to the DLL only to PowerShell.exe and you monitor that executable with HIPS/some...
Why am I not surprised about #1
You should also consider that the general attacker(script kiddie ish) would use tools available or not very complicated thus he'd be leveraging...
Indeed blocking it before it executes is the best to go for ... Regarding C# from this https://www.sixdub.net/?p=367: To blacklist a .NET...
Amazing thank you. I'll get the set up and try it out :)
Interesting .. Though this: “But that fix only addressed the issue of withdrawals from ATMs, not transfers from one card to another.” continues...
@itman Thanks for all the replies on the thread, nice read .. If you had to sum up in a single post ways to avoid Poweliks/Powershell based...
PS is a good vector cos it has low detection rate. BTW sanboxing powershell.exe doesn't solve your problems, essentially powershell.exe is just a...
Seems like a good way especially because the majority of people are unaware of macros or that MS office can be scripted
Separate names with a comma.
