Aleksandar Milenkoski, Author at SentinelOne

Operation Magalenha Long Running Campaign Pursues Portuguese Credentials And PII 3

labs

Adversary

Operation Magalenha | Long-Running Campaign Pursues Portuguese Credentials and PII

Aleksandar Milenkoski / May 25, 2023

A Brazilian threat actor is targeting users of over 30 Portuguese financial institutions with custom backdoors.

Kimsuky Ongoing Campaign Using Tailored Reconnaissance Toolkit 1

labs

Adversary

Kimsuky | Ongoing Campaign Using Tailored Reconnaissance Toolkit

Aleksandar Milenkoski / May 23, 2023

North Korean APT group focuses on file reconnaissance and information exfiltration with latest variant of RandomQuery malware.

labs

Advanced Persistent Threat

Transparent Tribe (APT36) | Pakistan-Aligned Threat Actor Expands Interest in Indian Education Sector

Aleksandar Milenkoski / April 13, 2023

SentinelLABS has been tracking a cluster of malicious documents that stage the Crimson RAT malware distributed by APT36 (Transparent Tribe).

Operation Tainted Love Chinese APTs Target Telcos In New Attacks 4

labs

Advanced Persistent Threat

Operation Tainted Love | Chinese APTs Target Telcos in New Attacks

Aleksandar Milenkoski / March 23, 2023

Cyber espionage actor deploys custom credential theft malware in new campaign targeting the telecoms sector.

labs

DBatLoader and Remcos RAT Sweep Eastern Europe

Aleksandar Milenkoski / March 6, 2023

Learn about phishing campaigns distributing RATs and the DBatLoader malware loader targeting Eastern European institutions and businesses.

WIP26 Espionage Threat Actors Abuse Cloud Infrastructure In Targeted Telco 4

labs

Adversary

WIP26 Espionage | Threat Actors Abuse Cloud Infrastructure in Targeted Telco Attacks

Aleksandar Milenkoski / February 16, 2023

A new threat cluster has been targeting telecommunication providers in the Middle East and abusing Microsoft, Google and Dropbox cloud services.

MalVirt .NET Virtualization Thrives In New Malvertising Attacks 3

labs

Crimeware

MalVirt | .NET Virtualization Thrives in Malvertising Attacks

Aleksandar Milenkoski / February 2, 2023

.NET malware loaders distributed through malvertising are using obfuscated virtualization for anti-analysis and evasion in an ongoing campaign.

DragonSpark Attacks Evade Detection With SparkRAT And Golang Source Code Interpretation 1

labs

Adversary

DragonSpark | Attacks Evade Detection with SparkRAT and Golang Source Code Interpretation

Aleksandar Milenkoski / January 24, 2023

A cluster of attacks SentinelLABS tracks as DragonSpark uses a novel technique, Golang source code interpretation, to avoid detection while also deploying a little-known tool called SparkRAT.

11 Problems ChatGPT Can Solve For Reverse Engineers And Malware Analysts 1

labs

Security Research

11 Problems ChatGPT Can Solve For Reverse Engineers and Malware Analysts

Aleksandar Milenkoski / December 21, 2022

ChatGPT has captured the imagination of many across infosec. Here's how it can superpower the efforts of reversers and malware analysts.

The Mystery Of Metador An Unattributed Threat Hiding In Telcos ISPs And Universities 3

labs

Advanced Persistent Threat

The Mystery of Metador | Unpicking Mafalda’s Anti-Analysis Techniques

Aleksandar Milenkoski / December 1, 2022

Discover the anti-analysis techniques of the Mafalda implant, a unique, feature-rich backdoor used by the Metador threat actor.