SecuriTricks

Using KATA and KEDR to detect the AdaptixC2 agent

AdaptixC2 is an emerging open-source post-exploitation framework rapidly adopted by threat actors in APT attacks and ransomware campaigns. Written in Go and C++, it supports Windows, macOS, and Linux with extensive modularity through Beacon Object Files (BOFs). The framework enables diverse command…

credential harvesting

lateral movement

post-exploitation framework

Published: April 17, 2026

Downloadable IOCs: 0

Notepad++ supply chain attack breakdown

The article details a sophisticated supply chain attack on Notepad++ that occurred from July to October 2025. Attackers compromised the update infrastructure, deploying various malicious payloads through three distinct infection chains. The attack targeted individuals and organizations in Vietnam, …

Published: February 3, 2026

Downloadable IOCs: 36

Inside China's Hosting Ecosystem: 18,000+ Malware C2 Servers Mapped Across Major ISPs

An analysis of Chinese hosting environments reveals over 18,000 active command-and-control (C2) servers distributed across 48 infrastructure providers. C2 infrastructure dominates malicious activity at 84%, followed by phishing at 13%. China Unicom hosts nearly half of all observed C2 servers, with…

Published: January 15, 2026

Linked vulnerabilities : CVE-2025-8110 (CVSS 8.7)

Downloadable IOCs: 12

Tag: mgbot

Attack reports

Using KATA and KEDR to detect the AdaptixC2 agent

Notepad++ supply chain attack breakdown

Inside China's Hosting Ecosystem: 18,000+ Malware C2 Servers Mapped Across Major ISPs

Evasive Panda APT poisons DNS requests to deliver MgBot

Evasive Panda scouting cloud services

Daggerfly: Espionage Group Makes Major Update to Toolset