Welcome to our

Cyber Security News Aggregator

.

Cyber Tzar

provide a

cyber security risk management

platform; including automated penetration tests and risk assesments culminating in a "cyber risk score" out of 1,000, just like a credit score.

[SANS ISC] Malicious Code Can Be Anywhere

published on 2023-06-20 14:11:54 UTC by Xavier
Content:

Today, I published the following diary on isc.sans.edu: “Malicious Code Can Be Anywhere“:

My Python hunting rules reported some interesting/suspicious files. The files are named with a “.ma” extension. Some of them have very low VT scores. For example, the one with a SHA256 dc16115d165a8692e6f3186afd28694ddf2efe7fd3e673bd90690f2ae7d59136 has a score of 15/59.

The “.ma” extension refers to animation projects created by Autodesk Maya, a 3D modeling and animation program. The files are typically ASCI files that describe the 3D scenes. I’ve absolutely, zero-knowledge of 3D software but after some Google searches, it seems that Maya supports Python!. Like the documentation says… [Read more]

The post [SANS ISC] Malicious Code Can Be Anywhere appeared first on /dev/random.

Article: [SANS ISC] Malicious Code Can Be Anywhere - published over 1 year ago.

https://blog.rootshell.be/2023/06/20/sans-isc-malicious-code-can-be-anywhere/   
Published: 2023 06 20 14:11:54
Received: 2023 06 20 15:00:34
Feed: /dev/random
Source: /dev/random
Category: Cyber Security
Topic: Cyber Security
Views: 1

Custom HTML Block

Click to Open Code Editor