BBTok Targeting Brazil: Deobfuscating the .NET Loader with dnlib and PowerShell

We break down the full infection chain of the Brazilian-targeted threat BBTok and demonstrate how to deobfuscate the loader DLL using PowerShell, Python, and dnlib.

This article has been indexed from Security Blog G Data Software AG

Read the original article: