SecuriTricks - redline

Not All Fun and Games: Lua Malware Targets Educational Sector and Student Gaming Engines

Over the past year, the delivery of Lua malware appears to have undergone simplification, possibly to reduce exposure to detection mechanisms. The malware is frequently delivered using obfuscated Lua scripts instead of compiled Lua bytecode, as the latter can trigger suspicion more easily.

ransomware

powershell

Published: October 9, 2024

Downloadable IOCs: 18

The Abuse of ITarian RMM by Dolphin Loader

This report explores how the Dolphin Loader, a malware-as-a-service loader, abuses the legitimate ITarian Remote Monitoring and Management (RMM) software to distribute various malware payloads. The loader leverages the built-in functionality of RMM tools, such as remote command execution and system…

Published: August 19, 2024

Downloadable IOCs: 24

Multiple Malware Dropped Through MSI Package

An analysis reveals the distribution of malware through an MSI package, specifically SectopRat and Redline stealer. The malware employs techniques like executing malicious scripts, disabling security measures, and establishing persistence through scheduled tasks. It communicates with command-and-co…

Published: August 14, 2024

Downloadable IOCs: 11

Unfurling Hemlock: Threat group uses cluster bomb campaigns

A threat actor dubbed Unfurling Hemlock has been observed distributing hundreds of thousands of malware samples in a campaign lasting several months. The malware is distributed using a 'cluster bomb' technique where each sample contains multiple stages of nested executable files, each containing ad…

Published: July 1, 2024

Downloadable IOCs: 55

Profiling Trafficers: Cerberus

This analysis delves into the activities of a group of malware operators known as Cerberus (formerly Amnesia) Team, who specialize in spreading infostealers, particularly in the Commonwealth of Independent States (CIS) region. It provides insights into their operations, tactics, and the evolution o…

dracula stealer (samurai)

2024-05-09

2024-05-10

Published: May 10, 2024

Downloadable IOCs: 24

Tag: redline

Attack reports

Inside a Malware Campaign: A Nigerian Hacker's Perspective

Chinese Malware Delivery Websites

Increase in Distribution of AutoIt Compile Malware via Phishing Emails

Gaming Engines: An Undetected Playground for Malware Loaders

Attempts to disrupt Russian businesses with MetaStealer

Over 10 Million Personal And Corporate Devices Infected By Information Stealers

Not All Fun and Games: Lua Malware Targets Educational Sector and Student Gaming Engines

The Abuse of ITarian RMM by Dolphin Loader

Multiple Malware Dropped Through MSI Package

Unfurling Hemlock: Threat group uses cluster bomb campaigns

Profiling Trafficers: Cerberus