Deep Dive Into TrickBot Executor Module “mexec”: Reversing the Dropper VariantContinuing our earlier analysis of the TrickBot Executor Module "mexec", we take a look at the dropper variant and reveal how it carries its payload onboardRead More
CrimewareAntonis TerefosFeb 7, 2023Cl0p Ransomware Targets Linux Systems with Flawed Encryption | Decryptor Available
CrimewareAleksandar MilenkoskiFeb 2, 2023MalVirt | .NET Virtualization Thrives in Malvertising Attacks
CrimewareAntonio CocomazziDec 22, 2022Custom-Branded Ransomware: The Vice Society Group and the Threat of Outsourced Development
CrimewareAleksandar MilenkoskiNov 7, 2022SocGholish Diversifies and Expands Its Malware Staging Infrastructure to Counter Defenders
CrimewareAntonio CocomazziNov 3, 2022Black Basta Ransomware | Attacks Deploy Custom EDR Evasion Tools Tied to FIN7 Threat Actor
CrimewareAleksandar MilenkoskiSep 8, 2022Crimeware Trends | Ransomware Developers Turn to Intermittent Encryption to Evade Detection
CrimewareAmitai Ben Shushan EhrlichSep 1, 2022PyPI Phishing Campaign | JuiceLedger Threat Actor Pivots From Fake Apps to Supply Chain Attacks
CrimewareAleksandar MilenkoskiAug 4, 2022Who Needs Macros? | Threat Actors Pivot to Abusing Explorer and Other LOLBins via Windows Shortcuts
CrimewareJim WalterJul 21, 2022LockBit 3.0 Update | Unpicking the Ransomware's Latest Anti-Analysis and Evasion Techniques
CrimewareJuan Andrés Guerrero-SaadeMay 19, 2022CrateDepression | Rust Supply-Chain Attack Infects Cloud CI Pipelines with Go Malware
CrimewareJames HaughomApr 27, 2022LockBit Ransomware Side-loads Cobalt Strike Beacon with Legitimate VMware Utility
CrimewareAntonis TerefosApr 21, 2022Nokoyawa Ransomware | New Karma/Nemty Variant Wears Thin Disguise
