How to Find a Suspicious Process on Windows with Get-Process
Find a suspicious process on Windows with Get-Process: executable path, digital signature, parent process and network …
Malware 41 posts
Information security in plain English: scams, hardening and privacy — plus retrogaming, games and geek culture.
SQL Slammer: The 376-Byte Worm That Slowed the Internet in 2003
On Jan 25, 2003, a 376-byte worm infected 75,000 SQL Server hosts in 10 minutes. Here's how Slammer worked and what it …
Bad Rabbit: the fake Flash ransomware that hit Kyiv in 2017
On Oct 24, 2017, Bad Rabbit used a fake Flash installer to hit a metro, an airport and media in Ukraine and Russia. How …
Infostealer: what it is and how to tell if you're infected
An infostealer steals saved passwords, session cookies and crypto wallets from your browser. See how it spreads, the …
Conficker: The Worm That Exploited Windows Flaw MS08-067
On Oct 23, 2008 Microsoft shipped an out-of-band patch, MS08-067. Conficker used that flaw on millions of PCs. Here's …
BadUSB: how a USB drive becomes a hacker keyboard (and defenses)
BadUSB and Rubber Ducky make a USB drive type commands on its own. See how it works, the FIN7 case, and how to block and …
How to Tell If Your PC Was Hacked: 8 Warning Signs
Mouse moving on its own, camera light blinking without reason, or disabled antivirus can signal a breach. Here are 8 …
How to know if your phone has spyware: 7 signs and what to do
Battery draining fast, camera turning on by itself — these can be signs of spyware. See 7 warning signs and how to check …
Target 2013: the theft of 40 million cards via an HVAC vendor
In 2013, attackers breached Target through an HVAC contractor and stole 40 million cards — the attack that redefined …
How to disable Office macros and close this classic attack vector
VBA macros were the primary vector for Emotet, Qakbot and Dridex. Learn how the attack works and how to block macros in …