Discussions
-
Introducing vmdiff: a tool to find everything that changes on your computer
We're publishing a new tool to diff virtual machine snapshots and view the diffs in-browser. It lets you see every file and process that’s changed between two points in time, and lets us finally answer the question “what happens on my computer when I do X?”. We’re releasing the prototype today on Github, we hope you like…
-
Icarus Labs research diary: Hiding malware in Docker Desktop's virtual machine
If you'd rather skip straight to the technical details, here's the blog post explaining how it all works. This post is the high-level story of how this technique was found, in which the story makes the thrilling transition to first-person. First things first: If you’re reading this, we somehow got away with calling it…
-
Hiding malware in Docker Desktop's virtual machine
For how this research was done, check out the research diary. You know Docker Desktop? The software developers have on their macOS laptops? Did you know that, on macOS, it runs a Linux Virtual Machine (VM) on your computer when you run it? We didn't know that, until we hid malware in the VM. The VM hides the malware…
-
Introducing Icarus Labs
Icarus Labs is Atlassian's experimental security research team. It’s inspired by research groups like Google's Project Zero and Facebook’s Red Team X (which research new vulnerabilities), but for any advancements in information security's state-of-the art. How does one simply advance the state-of-the-art? The ultimate goal…
