From e68723effac1081db2e979e8d4ebead53ef54501 Mon Sep 17 00:00:00 2001 From: Keith Manville Date: Thu, 3 Dec 2020 14:43:52 -0500 Subject: [PATCH] fixed formatting --- pages/case-studies-page.md | 3 --- 1 file changed, 3 deletions(-) diff --git a/pages/case-studies-page.md b/pages/case-studies-page.md index 3ee31f1..80247a6 100644 --- a/pages/case-studies-page.md +++ b/pages/case-studies-page.md @@ -190,7 +190,6 @@ Machine translation services (such as Google Translate, Bing Translator, and Sys - https://www.ericswallace.com/imitation ---- -<<<<<<< HEAD ## VirusTotal Poisoning **Summary of Incident:** An increase in reports of a certain ransomware family that was out of the ordinary was noticed. In investigating the case, it was observed that many samples of that particular ransomware family were submitted through a popular Virus-Sharing platform within a short amount of time. Further investigation revealed that based on string similarity, the samples were all equivalent, and based on code similarity they were between 98 and 74 percent similar. Interestingly enough, the compile time was the same for all the samples. After more digging, the discovery was made that someone used 'metame' a metamorphic code manipulating tool to manipulate the original file towards mutant variants. The variants wouldn't always be executable but still classified as the same ransomware family. @@ -211,8 +210,6 @@ Machine translation services (such as Google Translate, Bing Translator, and Sys - McAfee Advanced Threat Research ---- -======= ->>>>>>> e0a0ba3... fixed formatting ## Bypassing Cylance's AI Malware Detection **Summary of Incident:** Researchers at Skylight were able to create a universal bypass string that when appended to a malicious file evades detection by Cylance's AI Malware detector.