Tag: evasion

A sophisticated Linux malware named 'perfctl' has been actively targeting millions of servers worldwide for the past 3-4 years. I…

The report details sophisticated command and control (C2) techniques employed by the APT41 threat group. APT41 uses custom malwar…

This comprehensive report analyzes Gomorrah Stealer, a sophisticated malware designed to exfiltrate sensitive information from co…

The report provides insights into the evolving tactics and infrastructure of a threat group referred to as the 'Quad7 botnet oper…

The report provides insights into the evolving tactics and infrastructure of a threat group referred to as the 'Quad7 botnet oper…

Cybercriminals are employing a sophisticated two-stage malware campaign masquerading as the Palo Alto GlobalProtect tool to infil…

Seqrite Labs APT-Team discovered a sophisticated malware campaign targeting government and military officials in the Czech Republ…

Stroz Friedberg discovered sedexp, a stealthy Linux malware that utilizes udev rules to achieve persistence and evade detection. …

Kaspersky has uncovered a complex malware campaign orchestrated by Russian-speaking cybercriminals. The threat actors create sub-…

An investigation by The DFIR report revealed a collection of batch scripts designed for defense evasion and executing command-and…

This comprehensive technical analysis delves into the intricate workings of an advanced and localized malware campaign employing …

This analysis examines a recent malware campaign involving a dropper dubbed Gh0stGambit, which is employed to retrieve and execut…

This report details a malicious campaign exploiting the CVE-2024-21412 vulnerability in Microsoft Windows SmartScreen to bypass s…

This blog post examines MoonWalk, a new backdoor employed by APT41, a China-based threat actor known for campaigns in Southeast A…

This blog post provides an in-depth technical analysis of a newly discovered malware loader called DodgeBox, which is attributed …

This report details a recent campaign by the Turla threat group involving malicious LNK files that deliver a fileless backdoor. T…

This article demonstrates how to circumvent anti-analysis techniques employed by GootLoader malware while utilizing Node.js debug…

This report discusses recent findings of malicious Cobalt Strike infrastructure and malicious Cobalt Strike samples that leverage…

The report describes a recent campaign targeting Apache RocketMQ platforms, where attackers exploited a known vulnerability (CVE-…

A sophisticated multi-stage cyberattack was identified, utilizing an Excel file embedded with a VBA macro designed to deploy a DL…

The report analyzes a campaign where threat actors distribute various malware strains like RATs, coinminers, and loaders disguise…

This comprehensive analysis delves into the continuous evolution and refinement of sophisticated malware entities employed by a p…

This analysis examines the infection process of the DanaBot malware, distributed through sophisticated spam emails containing mal…

This comprehensive analysis provides a thorough examination of the REMCOS Remote Access Trojan (RAT), a prominent malware threat …

HijackLoader, also known as IDAT Loader, is a modular malware loader capable of executing multiple payloads. It utilizes a variet…

The report analyzes a new variant of the Adload adware that evades Apple's recent XProtect malware signature updates. Despite App…