follow.it gives you an easy way to subscribe to NETRESEC Network Security Blog's news feed! Click on Follow below and we deliver the updates you want via email, phone or you can read them here on the website on your own news page.
You can also unsubscribe anytime painlessly. You can even combine feeds from NETRESEC Network Security Blog with other site's feeds!
Title: NETRESEC - Network Forensics and Network Security Monitoring
Is this your feed? Claim it!
This post describes the binary command-and-control (C2) protocol used by CNCMachineRMS, a recently identified remote access trojan (RAT). We cover how the protocol was discovered, how its infrastructure was identified, and how network defenders can detect it.
Background
We have been tracking a previously unknown malware C2 protocol for several mont...