In this post we will unveil a new process injection we call “Ctrl-Inject” that leverages the mechanism of handling Ctrl signals in console applications. While going through MSDN as part of our research we came across the following comment regarding Ctrl signal handling:
enSilo Corporate and Product, cybersecurity
Dealing with the full capabilities of PowerShell-based, fileless attacks is daunting. The ability for PowerShell to run virtually invisibly on local systems as well as its ability to move throughout the Microsoft ecosystem makes it not only a challenging threat today, but one that will evolve rapidly.
enSilo Corporate and Product, cybersecurity
We are proud to announce that enSilo is a recommended vendor out of 20 vendors in the (AEP) 2018 group test. enSilo received 100% malware block rate of HTTP, Email, Docs, Scripts, Offline Threats and Evasions delivery mechanisms.
To get a free copy of the NSS Labs AEP 2018 SVM (Security Value Map) and enSilo's report please visit the enSilo
enSilo Corporate and Product, cybersecurity
Adwind is an infamous Remote Access Trojan (RAT) was first discovered in 2013. A new variant of Adwind RAT was detected and blocked by enSilo, while other anti-virus agents (AV) failed to detect, according to VirusTotal.
enSilo Corporate and Product, POS malware
The manufacturing industry is continuing to be heavily targeted and is one of the most susceptible to cyber attacks, such as WannaCry and NotPetya, due the majority of manufacturers depending on legacy operating systems. Protecting legacy operating systems without an Army of people, is an obstacle due to the current landscape and finding a
enSilo Corporate and Product, cybersecurity
We are honored to have received such positive accolades from SC Magazine on the enSilo endpoint security platform. Below are some small takeaways from today’s article.
enSilo Corporate and Product, cybersecurity
enSilo Provides a Comprehensive Pre and Post Infection Protection Platform All In One Single Agent Centrally Managed By a Unified Console. Independent IT Security Institute Certifies enSilo’s Pre Infection Next Generation Antivirus Protection Feature to Block 100% of Known Malware Attacks
enSilo Corporate and Product, cybersecurity
A Managed Service Provider's (MSP) main concern of adding security to their existing services, revolves around concerns with security expertise, management overhead, customer support and sufficient margins, while keeping costs down. A MSP simply extending their service offerings with an endpoint security solution, would be converting into a
enSilo Corporate and Product, cybersecurity
Stopping Advanced Malware, Pre- and Post-Execution: A SANS Review of enSilo's Comprehensive Endpoint Security Platform
Tags
- enSilo Corporate and Product (219)
- Weekly Security News (96)
- Windows (50)
- Malware (42)
- cybersecurity (28)
- Industry (23)
- enSilo Breaking Malware (23)
- Research (22)
- Business (14)
- Ransomware (13)
- code injection (9)
- Vulnerabilities (7)
- AtomBombing (6)
- WannaCry (6)
- POS malware (5)
- RAT (5)
- NSA (4)
- exploit (4)
- APT (3)
- Endpoint Protection (3)
- Mac OS X (3)
- Moker (3)
- NotPetya (3)
- Process Doppelganging (3)
- UAC (3)
- Web Malware (3)
- documentation (3)
- hooking (3)
- vulnerability (3)
- Android (2)
- ArdBot (2)
- CFG (2)
- Control Flow Guard (2)
- Emotet Botnet (2)
- Fileless Malware (2)
- Furtim (2)
- Gartner (2)
- GlobeImposter (2)
- Injection Techniques (2)
- Windows XP (2)
- av (2)
- elevation (2)
- meltdown (2)
- tools (2)
- APC (1)
- Bad Rabbit (1)
- CVS (1)
- CryFile (1)
- Detours (1)
- ESTEEMAUDIT (1)
- Equifax (1)
- FindADetour (1)
- GOZI (1)
- HIPAA (1)
- Hancitor (1)
- KPTI (1)
- Linux (1)
- Lockerpin.A (1)
- MSSP (1)
- ModPOS (1)
- NtSetInformationVirtualMemory (1)
- PCI DSS (1)
- Patch (1)
- PatchGuard (1)
- SCADA (1)
- Scarab (1)
- Unix (1)
- Verizon (1)
- Windows 10 (1)
- anti-virus (1)
- avulnerabilitychecker (1)
- bypass UAC (1)
- command injection (1)
- environment variable (1)
- excel-scriptlet (1)
- hospitality (1)
- media (1)
- path redirect (1)
- spectre (1)
- variable expansion (1)
- variables (1)
Subscribe
Subscribe to enSilo's Blog
and Stay on Top of the
Latest Security Research
and Industry News