Tag: digital signature

2 Attack Reports | 0 Vulnerabilities

Attack reports

EmEditor Homepage Download Button Served Malware for 4 Days

Between December 19-22, 2025, EmEditor's official website suffered a security breach, causing the main download button to serve malicious software. The fake installer, signed by WALSHAM INVESTMENTS LIMITED, contained infostealer malware targeting login credentials, browser history, and VPN settings…
infostealer
cryptocurrency
data theft
browser extension
digital signature
2025-12-30
emeditor
website compromise
Published: December 30, 2025
Downloadable IOCs: 1

Finding Minhook in a sideloading attack – and Sweden too

A threat actor campaign targeting multiple locations was observed in late 2023 and early 2024. Initially focused on the Far East, it later shifted to Sweden. The attacks used DLL sideloading techniques, employing the Minhook library to detour Windows API calls. The clean loader was obtained from in…
cobalt strike
dll sideloading
api hooking
2025-05-01
minhook
digital signature
Published: May 1, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports