Avast Decoded
decoded.avast.io · Company blog · on HN since 2019
Avast's threat research blog, with technical reports on malware, rootkits, zero-days, and attacks on software update channels.
What HN saysHN links it for original malware analyses such as the ransomed coffee machine, eScan update backdoor, and Lazarus rootkit, often as the better primary source.
26HN people shared it
6linked it in comments
27stories submitted
547story points
3 years agolast shared
2019people per year2026
Most-shared posts
- 1The fresh smell of ransomed coffee4 people · 148 points · first shared 2020 · 178 comments on HN
- 2Putting an end to Retadup: A malicious worm that infected hundreds of thousands2 people · 68 points · first shared 2019 · 14 comments on HN
- 3The Return of Candiru: Zero-Days in the Middle East2 people · 2 points · first shared 2022 · 1 comments on HN
- 4The secret life of GPS trackers2 people · 2 points · first shared 2019 · discussion on HN
- 5Crackonosh: A New Malware Distributed in Cracked Software2 people · 1 points · first shared 2021 · discussion on HN
- 6Linux Threat Hunting: ‘Syslogk’ a kernel rootkit found in the wild1 people · 140 points · first shared 2022 · 54 comments on HN
- 7Lazarus and the FudModule rootkit: Beyond BYOVD with an admin-to-kernel zero-day1 people · 76 points · first shared 2024 · 19 comments on HN
- 8Attackers spread backdoor via eScan antivirus software update process1 people · 57 points · first shared 2024 · 56 comments on HN
- 9Recovery of function prototypes in Visual Basic 6 executables1 people · 28 points · first shared 2022 · 12 comments on HN
- 10Backdoored Browser Extensions Hid Malicious Traffic in Analytics Requests1 people · 4 points · first shared 2021 · discussion on HN
- 11Major certification authority in Mongolia was backdoored with Cobalt Strike1 people · 3 points · first shared 2021 · discussion on HN
- 12Researchers for Avast have developed a decryptor for the Akira ransomware1 people · 3 points · first shared 2023 · discussion on HN
- 13FakeMBAM: Backdoor delivered through software updates1 people · 3 points · first shared 2020 · discussion on HN
- 14Apt Group Targeting Governmental Agencies in East Asia1 people · 2 points · first shared 2020 · discussion on HN
- 15HiddenAds up to no good again and spreading via Android gaming apps1 people · 2 points · first shared 2020 · discussion on HN
What HN people wrote when they linked it
skilled · 2024-04-24
Technical report,
https://news.ycombinator.com/item?id=40133680
https://decoded.avast.io/janrubin/guptiminer-hijacking-antivirus-updat…
daenz · 2022-08-13
I dug around a little bit and couldn't find a source supporting either of our claims. I did find verified examples of crypto miners in cracked software[0]. I think the threat landscape for cracks has probably changed with the rise of crypto mining.
0. https://decoded.avast.io/danielbenes/crackonosh-a-new-malware-distribu…
mzs · 2021-12-17
US Commission on International Religious Freedom
> While we have no information on the impact of this attack or the actions taken by the attackers, based on our analysis of the files in question, we believe it’s reasonable to conclude that the attackers were able to intercept and possibly exfiltrate all local network traffic in this organization. This could include information exchanged with other US government agencies and other international governmental and nongovernmental organizations (NGOs) focused on international rights. We also have indications that the attackers could run code of their choosing in the operating system’s context on infected systems, giving them complete control.
https://decoded.avast.io/threatintel/avast-finds-backdoor-on-us-govern…
charles_f · 2020-09-26
aunty_helen · 2020-09-26
https://decoded.avast.io/martinhron/the-fresh-smell-of-ransomed-coffee…
Original link from the article, perhaps a better source?
ga-vu · 2019-08-29
Source with technical details: https://decoded.avast.io/janvojtesek/putting-an-end-to-retadup-a-malic…
Saved you a click