Web blog d'un ingénieur en sécurité informatique. IT Security watcher's blog: news, threats analysis, AV issues, PoC, IT security, bugs... Contact: philippe.vialle@wanadoo.fr
![[VX watch] Is latest gVIM Win64 binary compromised?](https://image.over-blog.com/HJEkK8oLjAKdrbuAsKC-zG6h8tI=/640x220/smart/filters:no_upscale()/image%2F0995926%2F20191105%2Fob_f1558d_gvim-chocolatey-detectdw-051119.PNG)
While achieving regular maintenance on some workstation, using Chocolatey automation, I got the following error message: Well, there is indeed a detection in the Windows Defender history log! And here is a bit of threat intel about it: https://www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/Trojan.Win32.INFOSTEAL.TIDAOCN...
Lire la suite