Guardicore Labs
guardicore.com · Company blog · on HN since 2016
Guardicore's security research team publishes analyses of botnets, ransomware, and vulnerabilities in data center and cloud software.
What HN saysHN links it as the primary technical source for attack write-ups like the MySQL ransomware; one commenter is skeptical of its automated pentesting tool claims.
21HN people shared it
4linked it in comments
22stories submitted
217story points
5 years agolast shared
2016people per year2026
Most-shared posts
- 1MS Exchange Autodiscover Leak4 people · 12 points · first shared 2021 · discussion on HN
- 2FritzFrog: A New Generation of Peer-to-Peer Botnets3 people · 151 points · first shared 2020 · 46 comments on HN
- 3Opportunistic Ransomware Devastating MySQL Servers2 people · 2 points · first shared 2020 · discussion on HN
- 4Butter – Backdoor user and Trojan1 people · 10 points · first shared 2018 · discussion on HN
- 5A vulnerability in Debian's apt allows for easy lateral movement in data centers1 people · 6 points · first shared 2019 · discussion on HN
- 6The NANSH0U Campaign – Hackers Arsenal Grows Stronger1 people · 6 points · first shared 2019 · discussion on HN
- 7Recovering plaintext passwords from Azure VMs like it's the 1990s1 people · 5 points · first shared 2018 · discussion on HN
- 8WarezTheRemote: Turning Comcast Remotes into Listening Devices1 people · 4 points · first shared 2020 · discussion on HN
- 9WarezTheRemote – Turning remotes into listening device [pdf]1 people · 4 points · first shared 2020 · discussion on HN
- 10Operation Prowli: Monetizing 40,000 victim machines1 people · 4 points · first shared 2018 · discussion on HN
- 11IResponse to IEncrypt1 people · 4 points · first shared 2019 · discussion on HN
- 12Critical 9.9 Vulnerability in Hyper-V Allowed Attackers to Exploit Azure1 people · 3 points · first shared 2021 · discussion on HN
- 13SMB Worm “Indexsinas” Uses Lateral Movement to Infect Whole Networks1 people · 2 points · first shared 2021 · discussion on HN
- 14Beware the Hex-Men1 people · 1 points · first shared 2017 · discussion on HN
- 15Botnet that mines crypto-currencies1 people · 1 points · first shared 2017 · discussion on HN
What HN people wrote when they linked it
nyellin · 2020-11-04
If this is the type of thing that interests you, it's worth pointing out that Guardicore is hiring a team lead to manage the open source project:
https://www.guardicore.com/company/careers/?id=AE.71F
yuribro · 2017-11-01
GuardiCore | (Senior) Software Developer | Tel Aviv, Israel | ONSITE, Full Time
We develop a unique security product for large data centers, which does best of class breach detection, network visibility and micro segmentation.
Our product is written in Python where possible, C in both user mode and kernel (Linux and Windows).
Come work with a growing team of bright developers, and solve hard problems on a day to day basis.
If this interests you - contact me at [email protected] or visit our careers page https://www.guardicore.com/company/careers/
Jerry2 · 2020-12-24
Here is the source of all these articles with actual technical info on the attack:
https://www.guardicore.com/labs/please-read-me-opportunistic-ransomwar…
raesene9 · 2020-11-04
I'm always slightly dubious of full automated penetration testing tools, particulary ones that state things like
"It is non-intrusive, with no impact on your network." (from https://www.guardicore.com/infectionmonkey/)
Having a quick look at the site some of the modules it can use are brute-force password guessers which could cause account lockouts quite easily, depending on how they're used.
Also in my moderately long experience of pentesting (~15 years) even quite innocuous seeming actions can negatively impact systems under review (I've knocked over whole networks with standard port scanning, taken out a website with a ' character in a login box, seen another website taken out by being spidered etc)
This isn't to knock this tool in particular, just expressing a general wariness of tooling which claims to be able to fully automate a process and do so with zero risk.