Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Taha Karim
Objective-See's Blog
SeaFlower 藏海花 A backdoor targeting iOS web3 wallets Objective-See's research, tools, and writing, are supported by the "Friends of Objective-See" such as: In this guest blog post, the security researcher Taha Karim (@lordx64) of Confiant, details a sophisticated threat targeting web3 users. The writeup was originally posted on Confiant’s site. Mahalo for sharing Taha! 🤩 Background Confiant monitors 2.5+ billion ads per day via 110+ integrations in the advertising stack.
Internet Explorer CVE-2019-1367 Exploitation - part 1
In this section we will go through the process of extracting the exploit from the pcaps generously provided by malware-traffic-analysis.
Internet Explorer CVE-2019-1367 In the wild Exploitation - prelude
Photo by Darius Bashar on Unsplash There are some important aspects to know about CVE-2019–1367 before diving into the technical analysis including the intel around it and the series of events following the in-the-wild exploitations and Microsoft patches. First of all, here is the bug class of this bug based on the Google P0 report: JScript variable (represented as VAR structure) isn’t properly tracked by garbage collector Is it important to understand the bug class.
Internet Explorer CVE-2019-1367 Exploitation - part 2
In Part1 we explained CVE-2019–1367 vulnerability root cause. In this part we will discuss how this bug was exploited in the wild to achieve code execution. We will focus on the exploits we found in the wild used by both Magnitude Exploit Kit and DarkHotel APT. If needed, readers can go directly to Part3 for the Magnitude Exploit KIT shellcode analysis.
New macOS Bundlore Loader analysis
Photo by Max Letek on Unsplash Looking at a recent Malvertising campaign detected by Confiant’s realtime Malvertising detection engine, we stumbled upon a slightly different piece of the macOS Bundlore Loader, so we thought it might be interesting for our readers to get some enlightening feedback on what our favorite Malvertising threat actors are up to these days.
OSX/Shlayer new Shurprise.. unveiling OSX/Tarmac
Photo by Nahel Abdul Hadi on Unsplash macOS malware is becoming a serious threat to mac users. Cyber criminals, APT groups, nation state actors, are extensively targeting Apple iOS/MacOS devices for various reasons: continuous innovation and development of Apple platforms leads ultimately to new attack surfaces (and more 0-days sold in the underground). Weak malware built-in security features: macOS ships with GateKeeper and XProtect, but both of these protections can be by-passed by new malware.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Taha
Contact Taha, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack