In the recent DEF CON Meet, technical director of security shop Endgame Hyrum Anderson disclosed a research paper on adapting API frameworks in building a malware that AV engines cannot identify.
The core function of the system is to build a legitimate looking app by making minor changes to the original app that can avoid AV detections. By making minor changes they have deceived the AV Engines and they named as gym-malware.
Andrew said, “All machine learning models have blind spots,”. “Depending on how much knowledge a hacker has they can be convenient to exploit.”Also Read Alternative Android App Store “CepKutusu.com” Spreading Malware From Every Downloaded App
In a span of 15 hours of training, the software ran over 100,000 samples past an unnamed security engine. Around 60% of samples produced can bypass the system security.
Code for OpenAI Gym published in Github by Anderson and their team.
OpenAI Gym is a toolkit for developing and comparing reinforcement learning algorithms. This makes it possible to write agents that learn to manipulate PE files (e.g., malware) to achieve some objective (e.g., bypass AV) based on a reward provided by taking specific manipulation actions.
A recent discovery by the FortiMail Incident Response team has revealed a highly sophisticated email…
A new wave of cyber threats targeting large language models (LLMs) has emerged, exploiting their…
PIVOTcon, joint research by Validin and SentinelLABS has exposed FreeDrain, an industrial-scale cryptocurrency phishing operation…
Cybersecurity researchers have reported a significant rise in web breaches triggered by a lesser-known technique:…
A new wave of cyberattacks is targeting Active Directory (AD) environments by abusing Windows Remote…
Security researchers Nikolai Skliarenko and Yazhi Wang of Trend Micro’s Research Team have disclosed critical…
View Comments