Today in our section on "uncoventional #Malware delivery": #ARJ archives! 📦
ARJ (Archived by Robert Jung) has been around since the MS-DOS days and is occasionally used to deliver e.g. #AgentTesla, #Formbook or #Guloader

You can recognize ARJ archives by their Magic: 60 EA
Extraction can be handled with 7zip for example.
For more information on the file format check out Ange Albertini's excellent graphic representation: https://twitter.com/angealbertini/status/1619006171360395264

As an example we dug up a #Lokibot sample from last year where the delivery chain looked like this: ARJ --> RAR --> EXE
To fool the victims into opening the next file they used the common #doubleExtension tick, e.g. .pdf.exe

IoC for those playing along at home:
162.0.223[.]13
kbfvzoboss[.]bid
alphastand[.]trade
alphastand[.]win
alphastand[.]top
➡️/alien/fre.php

PO_Payment for invoice[...].eml.arj
d0c8824d1e19ca1af0b88a477fa4cad6

SHIPPING_DL-PL-EXPRESS_EXPORT.PDF.exe
88bdf4f8fe035276da984c370e4cda2c

#infosec #cybersecurity #blueteam

[HowTo] 'pigz', un compresor multiprocesador / multinúcleo #sistemas_operativos #gnu_linux #linux #debian #pigz #gzip #tar #tar.gz #.gz #7zip #p7zip #rar #arj #ace #zip #compresion #multinucleo #multiprocesador #multiprocessor #multicore #zlib #pthread #apt #cli #linea_de_comandos #terminal #instalacion #nextcloud https://hijosdeinit.gitlab.io/howto_pigz_compresor/

說到 shareware，想起一些以前註冊過的軟體，譬如 ARJ, timEd。

原本 ARJ 比 RAR 優秀，作者是華人。可惜 RAR 慢慢進步，ARJ 卻原地踏步，最終... 連我都不知道後來怎麼了。

現在很少人知道 ARJ。

至於 timEd，更慘，連 Google 都不知道它是啥。

#arj #timed

This is just a modern #BBS. But thankfully with infinite modems and, being 30 years on, I don't need to download #ARJ and a #DOS #JPEG decoder for #caturday! 😺

(and I'm no longer reading Dr. Dobbs Journal and BYTE to hear about Unicode and wondering how that'll ever fit in memory and if the 16-bits that Microsoft is bravely choosing for some mysterious Windows #NT toy is really enough anyways) _(narrator: it wasn't enough)_