Hide and Seek | New Zloader Infection Chain Comes With Improved Stealth and Evasion Mechanisms
A new ZLoader campaign abuses Google Ads to target European banking institutions with signed MSI payloads and more than 300 domains.
Read More
Hive Attacks | Analysis of the Human-Operated Ransomware Targeting Healthcare
Hive is a double-extortion ransomware group that’s hit over 30 organizations. Read our deep-dive into the ransomware toolkit.
Read More
Conti Unpacked | Understanding Ransomware Development As a Response to Detection
Conti’s rapid encryption speed is matched only by its rapid evolution. SentinelLabs’ deep dive explores its development in unprecedented detail.
Read More
Evasive Maneuvers | Massive IcedID Campaign Aims For Stealth with Benign Macros
A widespread phishing campaign in operation since May is using a mix of old and new evasion tricks to drop IcedID malware.
Read More
Gootloader: ‘Initial Access as a Service’ Platform Expands Its Search for High Value Targets
Gootloader expands its scope to target military, pharmaceutical and energy sectors, operating on an Initial Access As a Service model.
Read More
Caught in the Cloud | How a Monero Cryptominer Exploits Docker Containers
This crypto mining campaign doesn’t use notable exploit components but leverages shell scripts to infect cloud containers and bypass AVs.
Read More
Avaddon RaaS | Breaks Public Decryptor, Continues On Rampage
Unbreakable encryption, a data leak site and threats of DDoS attacks, Avaddon has all the tricks of a modern RaaS. And now version 2 is on the way.
Read More
HelloKitty Ransomware Lacks Stealth, But Still Strikes Home
HelloKitty lacks the stealth of Ryuk, REvil and Conti, but has still struck some notable targets, including CEMIGO. Ransomware overview and IoCs here.
Read More
Zeoticus 2.0 | Ransomware With No C2 Required
Zeoticus is a Windows-specific ransomware that can execute fully offline with no callback to a C2, making network activity detection rules redundant.
Read More
Greyware’s Anatomy: The “Potentially Unwanted” are Upping Their Game
Adware infections may appear unremarkable at first, but in this example incident analysis we demonstrate their growing sophistication and risk.
Read More