Amged Wageh

Nov 8, 2024 | securelist.com | Saurabh Sharma |Victor Sergeev |Amged Wageh |Ahmed Khlief

IntroductionIn 2021, we began to investigate an attack on the telecom industry in South Asia. During the investigation, we discovered QSC: a multi-plugin malware framework that loads and runs plugins (modules) in memory. The framework includes a Loader, a Core module, a Network module, a Command Shell module and a File Manager module. It is dropped either as a standalone executable or as a payload file along with a loader DLL.

Oct 29, 2024 | securelist.com | Victor Sergeev |Ahmed Khlief |Igor Kuznetsov |Amged Wageh

IntroductionOrganizations often rely on a layered defense strategy, yet breaches still occur, slipping past multiple levels of protection unnoticed. This is where compromise assessment enters the game. The primary objective of these services is risk reduction.