Blog - Page 14 of 15 - Perception Point

Incident Report: Fax Attack

Learn how a fax attack tricks employees into click on a phishing link by leveraging known cybersecurity service, EFax.

Perception Point Incident Response
Jan-19

Incident Report: AP28 – Fancy Bear

In this post we discuss how Perception Point protects against highly advanced threats like APT28 (Fancy Bear).

Perception Point Incident Response
Jan-19

CVE-2017-0199 (Still) In The Wild

Learn how Perception Point’s advanced threat detection platform caught an advanced attack (CVE-2017-0199) delivered via a malicious document.

Perception Point Incident Response
Dec-18

Incident Report: Trick or Treat

In this post we discuss a phishing technique that tricks users into thinking an image of the attached file can be opened in snapshot mode.

Perception Point Incident Response
Dec-18

Changing Memory Protection in an Arbitrary Process

In Linux, the API to change memory protection is called Mprotect or pkey_mprotect, and both operate on the current process’ address space.

Ron Hass, Senior Researcher
Nov-18

Incident Report: Hijacked Email Account

In this post we discuss how the main aspect of hijacking is using a legitimate user’s email account in order to deliver malware.

Perception Point Incident Response
Nov-18

Incident Report: Excel Macro Puzzle Attack

We discuss how attackers use a legitimate user’s email account and macro code to deliver malware as the response to an existing email thread.

Perception Point Incident Response
Oct-18

The Gödel Proof & the Malware-Detection Spoof

In this post we take inspiration from Kurt Gödel looking at the system from an outsider’s point of view to detect malware.

Shlomi Levin
Jul-18

black and white chain advanced threat protection

CVE-2015-5122: Exploitation Using COOP

In this post we discuss advanced code reuse technique "COOP," which uses an old vulnerability to conform to the theoretical boundaries of CFI.

Shlomi Levin
Jun-18

Phishing Links are Moving to Email Attachments

In this post we discuss how attackers are putting embedded URLs inside email attachments instead of the email body to evade security filters.

Michael Aminov, Co-founder
Mar-18

Analysis and Exploitation of a Linux Kernel Vulnerability

Learn how the Linux kernel vulnerability is caused by a reference leak in the keyrings facility, primarily for drivers to cache security and other data. CVE-2016-0728.

Perception Point Research
Mar-18

Malicious Microsoft Office Attachments On The Rise

In this post we discuss the rise of cyberattacks originating from malicious Microsoft Office attachments and what you can do about it.

Michael Aminov, Co-founder
Feb-18

Blog.