Reply to thread

Message

<blockquote data-quote="Vitali Ortzi" data-source="post: 1114195" data-attributes="member: 57714">You gotta mix everything from packing to non packing , obfuscation and no obfuscationSometimes being packed , obfuscated can actually cause some very aggressive av software to mark anything maliciousMeanwhile it can help bypass some modules of less aggressive avsSo even the most basic stuff needs varietyOh and sometimes making simple scripts especially using non common languages ,less commonly&nbsp; used sub types of mitre tactics can be very effectiveSo you don&#039;t need to do anything fancy to bypass majority of av software and ai can help with coding in uncommon languages the threat actor may not have experience&nbsp; required in an obscure language ,less commonSo an attacker who doesn&#039;t know how to code can bypass an av with simple ai assistance Oh and definitely you don&#039;t need any overflow , rop , or any memory corruption, cve to bypass majority of&nbsp; products by the way they are usually configured , stay at&nbsp; default</blockquote>

[QUOTE="Vitali Ortzi, post: 1114195, member: 57714"] You gotta mix everything from packing to non packing , obfuscation and no obfuscation Sometimes being packed , obfuscated can actually cause some very aggressive av software to mark anything malicious Meanwhile it can help bypass some modules of less aggressive avs So even the most basic stuff needs variety Oh and sometimes making simple scripts especially using non common languages ,less commonly used sub types of mitre tactics can be very effective So you don't need to do anything fancy to bypass majority of av software and ai can help with coding in uncommon languages the threat actor may not have experience required in an obscure language ,less common So an attacker who doesn't know how to code can bypass an av with simple ai assistance Oh and definitely you don't need any overflow , rop , or any memory corruption, cve to bypass majority of products by the way they are usually configured , stay at default [/QUOTE]

Verification