Tag: decryption

2 Attack Reports | 0 Vulnerabilities

Attack reports

Lazarus Group targets Aerospace and Defense with new Comebacker variant

This analysis details a recent espionage campaign by the DPRK-nexus threat actor Lazarus Group targeting the aerospace and defense sectors. The campaign employs a new variant of the Comebacker backdoor, showcasing the actor's ongoing refinement of their malware arsenal. The attackers use highly spe…
backdoor
north korea
defense
aerospace
comebacker
dprk
c2 communication
spear phishing
decryption
2025-11-10
Published: November 10, 2025
Downloadable IOCs: 15

Analyzing an Encrypted Phishing PDF

This analysis explores the challenges of decoding encrypted PDF documents, particularly in the context of phishing. It explains that while the structure of encrypted PDFs remains visible, strings and streams are encrypted. The article recommends using qpdf, an open-source tool, to decrypt PDFs for …
phishing
2024-11-04
decryption
qpdf
drm
pdf-parser
ciphertext
uri extraction
encrypted pdf
confidentiality
Published: November 4, 2024
Downloadable IOCs: 0
Click here to see more Attack Reports