Apt

Red Leaves malware analysis
This technical note discusses a relatively undocumented implant used by the APT10 group. This is named “Red Leaves” after …
Ahmed Zaki, David Cannings
PDF Project Signatures
Sakula DLL planting analysis
This technical note discusses a version of Sakula uploaded to VirusTotal on the 25th April 2016. The sample initially looked …
David Cannings
PDF Project Signatures
Extracting the payload from a CVE-2014-1761 RTF document
In March Microsoft published security advisory 2953095, detailing a remote code execution vulnerability in multiple versions of …
David Cannings
Original blog Local mirror