Category: Network security

Malware traffic analysis helps detect malicious activity in network traffic. Using ntopng, a Qakbot-infected spambot campaign was analyzed, revealing security risks.

The xHunt campaign, active since 2018, targets Kuwaiti organizations. It uses PowerShell backdoors TriFive and Snugy for persistent, unauthorized access.

The SunburstDomainDecoder tool now uses passive DNS data to identify users affected by the SUNBURST backdoor, notably marking second-stage infections.

The Sunburst backdoor, used in the SolarWinds attack, utilized stealth techniques to evade detection, including security checks and covert communication via DGA domains.

Palo Alto Networks found attackers increasingly use pre-registered strategically dormant domains in attacks, exploiting their longevity for perceived legitimacy before a surge of…

In the latest ntopng update, alerts are enhanced with attacker and victim metadata, improving detection of network and security issues like Hancitor infections.

Malware network threats increase with encrypted botnets, like those using Telegram. Tools like nDPI and ntopng can enhance detection and mitigate risks.

SunBurst malware was disclosed recently, and detection rules have been released. nDPI and ntop tools can detect and block it despite outdated SSL…

Discover why security-focused network traffic analysis is essential for detecting encrypted threats, vulnerable protocols, and IoT risks in real time.

Ripple20 highlights IoT vulnerabilities. nDPI offers a risk factor analysis for dynamic threat detection, reducing reliance on rigid signature-based systems.