corpus.blog
41554 blogs · [ { "id": "01a08756-36f4-7287-bd23-8e81bd3faa42", "title": "Cara Remove Android Malware Jemputan APK", "url": "https://blog.xanda.org/2025/04/25/cara-remove-android-malware-jemputan-apk/", "published_at": "2025-04-25T14:35:29+00:00" }, { "id": "01a08756-36f4-7287-bd23-8e81be21c038", "title": "Ongoing SEO Poisoning Attacks on Government Websites", "url": "https://blog.xanda.org/2024/08/14/ongoing-seo-poisoning-attacks-on-government-websites/", "published_at": "2024-08-14T00:54:31+00:00" }, { "id": "01a08756-36f5-7087-bd78-9a458f47ebdb", "title": "Give Me a Call and I Will Scam You", "url": "https://blog.xanda.org/2024/05/07/give-me-a-call-and-i-will-scam-you/", "published_at": "2024-05-07T15:54:09+00:00" }, { "id": "01a08756-36f5-7087-bd78-9a458fb22c7f", "title": "Discoveries and Reflections", "url": "https://blog.xanda.org/2024/04/29/discoveries-and-reflections/", "published_at": "2024-04-29T02:45:12+00:00" }, { "id": "01a08756-36f5-7087-bd78-9a45900b35ce", "title": "“SMS” Phishing on the Rise: A Growing Threat in Malaysia", "url": "https://blog.xanda.org/2024/04/28/sms-phishing-on-the-rise-a-growing-threat-in-malaysia/", "published_at": "2024-04-28T14:01:25+00:00" }, { "id": "01a0e534-a0b5-7267-a482-9a7907eb68f3", "title": "Honeypot Activity for 5-11 June 2023", "url": "https://blog.xanda.org/2023/06/12/honeypot-activity-for-5-11-june-2023/", "published_at": "2023-06-12T07:49:27+00:00" }, { "id": "01a0e534-a0b5-7267-a482-9a7908888654", "title": "Using Antivirus to Look for Vulnerable Log4j and Apply Mitigation", "url": "https://blog.xanda.org/2021/12/14/using-antivirus-to-scan-for-vulnerable-lib4j-and-apply-mitigation/", "published_at": "2021-12-14T10:39:30+00:00" }, { "id": "01a0e534-a0b5-7267-a482-9a7909051150", "title": "Bash Script to Locate log4j-core and delete JndiLookup.class", "url": "https://blog.xanda.org/2021/12/12/bash-script-to-locate-log4j-core-and-delete-jndilookup-class/", "published_at": "2021-12-12T09:03:38+00:00" }, { "id": "01a0e534-a0b5-7267-a482-9a7909c35388", "title": "In Response To FireEye’s Global DNS Hijacking Campaign", "url": "https://blog.xanda.org/2019/01/31/in-response-to-fireeyes-global-dns-hijacking-campaign/", "published_at": "2019-01-31T03:58:30+00:00" }, { "id": "01a0e534-a0b5-7267-a482-9a790a801010", "title": "Refreshing EK Hunting Technique (Enrichment) via TTP", "url": "https://blog.xanda.org/2017/01/02/refreshing-ek-hunting-technique-enrichment-via-ttp/", "published_at": "2017-01-02T03:49:18+00:00" }, { "id": "01a0e551-18ce-7091-8c19-1a8e2476c828", "title": "Locky DGA Threat Actor(s)", "url": "https://blog.xanda.org/2016/03/07/locky-dga-threat-actors/", "published_at": "2016-03-07T10:50:52+00:00" }, { "id": "01a0e551-18ce-7091-8c19-1a8e24fc2847", "title": "How Did I Find APT16 New Infa with VirusTotal pDNS and a lil Bit of Luck", "url": "https://blog.xanda.org/2016/01/25/how-did-i-find-apt16-new-infa-with-virustotal-pdns-and-a-lil-bit-of-luck/", "published_at": "2016-01-25T08:43:15+00:00" }, { "id": "01a0e551-18ce-7091-8c19-1a8e25a45f89", "title": "Yara Rule for Angler EK redirector JS", "url": "https://blog.xanda.org/2015/08/28/yara-rule-for-angler-ek-redirector-js/", "published_at": "2015-08-28T00:39:58+00:00" }, { "id": "01a0e551-18ce-7091-8c19-1a8e2672d535", "title": "Yara rule for jjencode", "url": "https://blog.xanda.org/2015/06/10/yara-rule-for-jjencode/", "published_at": "2015-06-10T06:42:41+00:00" }, { "id": "01a0e551-18ce-7091-8c19-1a8e273870fe", "title": "Fingerprinting (potential) Sinkhole Server", "url": "https://blog.xanda.org/2014/07/01/fingerprinting-potential-sinkhole-server/", "published_at": "2014-07-01T06:35:13+00:00" }, { "id": "01a0e566-0e40-70e6-9e15-224cf61bbb2f", "title": "Installing Compact Language Detection 2 (CLD2) on Ubuntu", "url": "https://blog.xanda.org/2014/04/02/installing-compact-language-detection-2-cld2-on-ubuntu/", "published_at": "2014-04-02T08:47:35+00:00" }, { "id": "01a0e566-0e40-70e6-9e15-224cf7062854", "title": "Macports on Mavericks", "url": "https://blog.xanda.org/2013/10/24/macports-on-mavericks/", "published_at": "2013-10-24T03:44:35+00:00" }, { "id": "01a0e566-0e40-70e6-9e15-224cf79c8846", "title": "In response to ISC Diary’s “an epidemic of typo squatting”", "url": "https://blog.xanda.org/2013/05/13/in-response-to-isc-diarys-an-epidemic-of-typo-squatting/", "published_at": "2013-05-13T15:04:43+00:00" }, { "id": "01a0e566-0e40-70e6-9e15-224cf8621584", "title": "Detecting counter.php – The BlackHole Redirector", "url": "https://blog.xanda.org/2013/04/05/detecting-counter-php-the-blackhole-redirector/", "published_at": "2013-04-05T08:05:53+00:00" }, { "id": "01a0e566-0e40-70e6-9e15-224cf9087dd6", "title": "RedKit Redirector Injected into Legitimate JavaScript Code", "url": "https://blog.xanda.org/2013/02/15/redkit-redirector-injected-into-legitimate-javascript-code/", "published_at": "2013-02-14T16:32:48+00:00" }, { "id": "01a0e575-13af-7240-a791-9bb44ed1927e", "title": "Yara Detection for Java Applet JMX Remote Code Execution (CVE-2013-0422)", "url": "https://blog.xanda.org/2013/01/12/yara-detection-for-java-applet-jmx-remote-code-execution-cve-2013-0422/", "published_at": "2013-01-12T09:47:22+00:00" }, { "id": "01a0e575-13af-7240-a791-9bb44ee9c8b9", "title": "RedKit Patterns – Additional Info to @fknsec Writeup", "url": "https://blog.xanda.org/2012/12/12/redkit-patterns-additional-info-to-fknsec-writeup/", "published_at": "2012-12-12T01:23:40+00:00" }, { "id": "01a0e575-13af-7240-a791-9bb44fbef9b8", "title": "URL in IP Formats which are Supported by Browsers", "url": "https://blog.xanda.org/2012/10/20/url-in-ip-formats-which-are-supported-by-browsers/", "published_at": "2012-10-20T04:49:18+00:00" }, { "id": "01a0e575-13af-7240-a791-9bb450081f19", "title": "Malaysian Research & Education Network Serving BlackHole", "url": "https://blog.xanda.org/2012/10/20/malaysian-research-education-network-serving-blackhole/", "published_at": "2012-10-20T03:46:57+00:00" }, { "id": "01a0e575-13af-7240-a791-9bb450f30aeb", "title": "Weekly Summary : Android tel URi and Malaysia Grey Cloud", "url": "https://blog.xanda.org/2012/10/02/weekly-summary-android-tel-uri-and-malaysia-grey-cloud/", "published_at": "2012-10-02T05:19:39+00:00" } ] posts Claim your blog
Back to blog.xanda.org
Blog · corpus.blog/blogs/blog.xanda.org/posts

blog.xanda.org

blog.xanda.org

2025

Cara Remove Android Malware Jemputan APKoriginal ↗
25 Apr 2025

2024

Ongoing SEO Poisoning Attacks on Government Websitesoriginal ↗
14 Aug 2024
Give Me a Call and I Will Scam Youoriginal ↗
7 May 2024
Discoveries and Reflectionsoriginal ↗
29 Apr 2024
“SMS” Phishing on the Rise: A Growing Threat in Malaysiaoriginal ↗
28 Apr 2024

2023

Honeypot Activity for 5-11 June 2023original ↗
12 Jun 2023

2021

Using Antivirus to Look for Vulnerable Log4j and Apply Mitigationoriginal ↗
14 Dec 2021
Bash Script to Locate log4j-core and delete JndiLookup.classoriginal ↗
12 Dec 2021

2019

In Response To FireEye’s Global DNS Hijacking Campaignoriginal ↗
31 Jan 2019

2017

Refreshing EK Hunting Technique (Enrichment) via TTPoriginal ↗
2 Jan 2017

2016

Locky DGA Threat Actor(s)original ↗
7 Mar 2016
How Did I Find APT16 New Infa with VirusTotal pDNS and a lil Bit of Luckoriginal ↗
25 Jan 2016

2015

Yara Rule for Angler EK redirector JSoriginal ↗
28 Aug 2015
Yara rule for jjencodeoriginal ↗
10 Jun 2015

2014

Fingerprinting (potential) Sinkhole Serveroriginal ↗
1 Jul 2014
Installing Compact Language Detection 2 (CLD2) on Ubuntuoriginal ↗
2 Apr 2014

2013

Macports on Mavericksoriginal ↗
24 Oct 2013
In response to ISC Diary’s “an epidemic of typo squatting”original ↗
13 May 2013
Detecting counter.php – The BlackHole Redirectororiginal ↗
5 Apr 2013
RedKit Redirector Injected into Legitimate JavaScript Codeoriginal ↗
14 Feb 2013
Yara Detection for Java Applet JMX Remote Code Execution (CVE-2013-0422)original ↗
12 Jan 2013

2012

RedKit Patterns – Additional Info to @fknsec Writeuporiginal ↗
12 Dec 2012
URL in IP Formats which are Supported by Browsersoriginal ↗
20 Oct 2012
Malaysian Research & Education Network Serving BlackHoleoriginal ↗
20 Oct 2012
Weekly Summary : Android tel URi and Malaysia Grey Cloudoriginal ↗
2 Oct 2012