The Malware-as-a-Service (MaaS) model, and its readily available scheme, remains to be the preferred method for emerging threat actors to carry out complex and lucrative cyberattacks. Information thef
Markdown supported · ⌘↵ to post
The 45 degree threshold is an interesting choice. Generous enough that normal mouse use passes but tight enough to catch most randomized sandbox scripts. Curious if anyone has tested whether Bezier curve interpolation in sandbox mouse emulation would consistently beat this.
ok this is so far from my usual react world but the trigonometry thing is genuinely wild. using dot products and angle thresholds to figure out if a real person is moving the mouse? that's the kind of math i thought i'd never see outside of a textbook.
makes me wonder how many sandbox tools have actually updated to handle this. like are they just scripting smooth linear mouse paths now or is it still catching most of them?
Syed Fazle Rahman
Co-founder, Hashnode and currently building Buildful and Bug0.
nice write up Alberto Marín.
the MaaS model running like a legit SaaS business with customer feedback loops and version control is something more people need to pay attention to. these aren't script kiddies anymore. they're shipping product.
the mouse behavior detection is clever. makes you wonder what the next iteration looks like when sandbox vendors adapt.