Tag: operation endgame

4 Attack Reports | 0 Vulnerabilities

Attack reports

DanaBot C2 Server Memory Leak Bug

A critical vulnerability named DanaBleed was discovered in DanaBot's C2 server, causing memory leaks from June 2022 to early 2025. This bug, introduced in version 2380, exposed sensitive information including threat actor details, server data, and victim credentials. The leak resulted from uninitia…

malware-as-a-service

operation endgame

information theft

Published: June 10, 2025

Downloadable IOCs: 2

Operation Endgame 2.0

International law enforcement agencies have taken additional actions in Operation Endgame, targeting cybercriminal organizations, particularly those behind DanaBot. DanaBot is a powerful modular malware family written in Delphi, capable of keylogging, capturing screenshots, recording desktop videos…

malware-as-a-service

operation endgame

targeted attacks

Published: May 23, 2025

Downloadable IOCs: 9

SmokeBuster Tool

ThreatLabz has developed SmokeBuster, a tool to detect, analyze, and remove SmokeLoader malware from infected systems. Despite Operation Endgame's disruption in May 2024, SmokeLoader continues to be used by threat groups. SmokeBuster supports various SmokeLoader versions and Windows systems, offeri…

operation endgame

malware analysis

thread manipulation

system performance

memory injection

Published: October 31, 2024

Downloadable IOCs: 0

Operation Endgame: Up In Smoke

A detailed technical analysis of Smoke malware loader, also known as SmokeLoader or Dofoil, which has been operational since 2011. Smoke is primarily used to deliver second-stage malware payloads like trojans, ransomware, and information stealers, and can also deploy custom plugins for various mali…

operation endgame

Published: May 30, 2024

Downloadable IOCs: 12

Click here to see more Attack Reports