Malware Analysis

Obfuscation Techniques Indicators of Compromise Command and Control Steganography Payload Delivery Backdoors Persistence Techniques Threat Actors Malware-as-a-Service VirusTotal

3 ARTICLES

5d ago

MedusaHVNC Hijacks Real Browsers on Hidden Windows Desktops

Researchers warn the newly documented MaaS remote‑access trojan uses layered obfuscation and a fixed command server so defenders must rely on network controls to detect and block it.

4 ARTICLES

last wk.

AI-Generated PowerShell Script Mapped Active Directory and Staged Data Exfiltration

14 ARTICLES

last mo.

Operation Endgame Disrupts Amadey and StealC Infrastructure

7 ARTICLES

last mo.

WhatsApp Account Hijacks Deliver VBScript That Installs ManageEngine Remote‑Access Tool

10 ARTICLES

last mo.

Law Enforcement Takedown Disrupts SocGholish, Cleans Nearly 15,000 WordPress Sites

4 ARTICLES

last mo.

SprySOCKS Backdoor Ports to Windows With Kernel-Driver Stealth

6 ARTICLES

2mo ago

Red Hat npm Packages Backdoored to Deliver 'Miasma' Credential‑Stealing Worm

3 ARTICLES

2mo ago

BTMOB Android RAT Sells Point‑and‑Click Builder for Full Device Takeover

10 ARTICLES

2mo ago

Mini Shai-Hulud Poisons Hundreds of AntV npm Packages in One-Hour Burst

3 ARTICLES

2mo ago

cPanel Flaw Under Active Attack by Long-Running Group Deploying 'Filemanager'

3 ARTICLES

2mo ago

Fake Claude AI Site Pushes New 'Beagle' Windows Backdoor

6 ARTICLES

2mo ago

CloudZ Malware Hijacks Microsoft Phone Link to Steal SMS Codes and Credentials

3 ARTICLES

3mo ago

New Nexcorium Mirai Variant Exploits TBK DVR Flaw to Build IoT DDoS Botnet

9 ARTICLES

3mo ago

Adobe Reader Zero-Day Exploited for Months Through Malicious PDFs

Malware Analysis

MedusaHVNC Hijacks Real Browsers on Hidden Windows Desktops

Dolphin X Malware Uses AI Profiler to Rank High‑Value Windows Victims

Chaos Ransomware's msaRAT Tunnels C2 Through Headless Chrome and Edge

HOLLOWGRAPH Malware Uses Microsoft 365 Calendars as a Covert C2 Channel

ClickLock Stealer Locks Mac Desktops and Forces Users to Reveal Passwords

Russian-Speaking Actor Trojanizes Popular Installers to Deploy Starland RAT

Multi‑Stage Malware Found in Four AsyncAPI npm Packages

AI-Generated PowerShell Script Mapped Active Directory and Staged Data Exfiltration

Operation Endgame Disrupts Amadey and StealC Infrastructure

WhatsApp Account Hijacks Deliver VBScript That Installs ManageEngine Remote‑Access Tool

Never miss stories about

Malware Analysis

Law Enforcement Takedown Disrupts SocGholish, Cleans Nearly 15,000 WordPress Sites

SprySOCKS Backdoor Ports to Windows With Kernel-Driver Stealth

Red Hat npm Packages Backdoored to Deliver 'Miasma' Credential‑Stealing Worm

BTMOB Android RAT Sells Point‑and‑Click Builder for Full Device Takeover

Mini Shai-Hulud Poisons Hundreds of AntV npm Packages in One-Hour Burst

cPanel Flaw Under Active Attack by Long-Running Group Deploying 'Filemanager'

Fake Claude AI Site Pushes New 'Beagle' Windows Backdoor

CloudZ Malware Hijacks Microsoft Phone Link to Steal SMS Codes and Credentials

New Nexcorium Mirai Variant Exploits TBK DVR Flaw to Build IoT DDoS Botnet

Adobe Reader Zero-Day Exploited for Months Through Malicious PDFs

Never miss stories about

Malware Analysis