Tag: multi-threaded

2 Attack Reports | 0 Vulnerabilities

Attack reports

AI-Automated Threat Hunting Brings GhostPenguin Out of the Shadows

An undocumented Linux backdoor called GhostPenguin was discovered using AI-driven threat hunting. This multi-threaded C++ malware provides remote shell access and file system operations over an encrypted UDP channel. It uses a structured handshake mechanism and synchronizes threads for registration…

ai threat hunting

udp communication

zero-detection malware

Published: December 8, 2025

Downloadable IOCs: 2

NailaoLocker Ransomware's 'Cheese'

NailaoLocker, a new ransomware variant targeting Windows systems, uses AES-256-CBC encryption and uniquely incorporates SM2 cryptography with hard-coded keys. It employs DLL side-loading for execution and uses I/O Completion Ports for multi-threaded file processing. The ransomware includes both enc…

dll side-loading

sm2 cryptography

Published: July 21, 2025

Downloadable IOCs: 3

Click here to see more Attack Reports