At Fox-IT (part of NCC Group) identifying servers that host nefarious activities is a critical aspect of our threat intelligence. One approach involves looking for anomalies in responses of HTTP servers. Sometimes cybercriminals that host malicious servers employ tactics that involve mimicking the responses of legitimate software to evade detection. However, a common pitfall ofContinue reading “The Spelling Police: Searching for Malicious HTTP Servers by Identifying Typos in HTTP Responses.”
You must be logged in to post a comment.