Mandiant and the Android Security and Privacy Team have worked together to enhance open-source binary analysis tool capa to detect Android malware hidden within native files. Adding new rules to capa, the tool can now identify suspicious activities and aid faster decisions. The updated tool was used to detect a malicious gambling app disguised as a music app on Google Play, highlighting its commitment to safeguard Android users.
Splunk Unveils a New AI Based Honeypot “DECEIVE” to Log Attacker Activities
Splunk has launched DECEIVE, an AI-driven honeypot system that simplifies the simulation of high-interaction environments for monitoring attacker behavior. Utilizing large language models, DECEIVE requires
