Tag: side-loading

3 Attack Reports | 0 Vulnerabilities

Attack reports

Casting a Wider Net: Scaling Threat

LeakNet, a ransomware operator, has expanded its initial access methods by utilizing ClickFix lures on compromised websites and implementing a new Deno-based, in-memory loader. The group has shifted from relying on initial access brokers to running its own campaigns. LeakNet's post-exploitation pla…

social engineering

lateral movement

in-memory execution

Published: March 18, 2026

Downloadable IOCs: 5

ClickFix in action: how fake captcha can encrypt an entire company

The report details a malware attack on a large Polish organization involving fake CAPTCHA techniques. It describes the initial infection vector, where users were tricked into running malicious code through a Windows+R shortcut. The analysis covers two main malware families: Latrodectus (version 2.3…

malware analysis

c2 communication

Published: February 19, 2026

Downloadable IOCs: 17

When your IPTV app terminates your savings

A new Android banking Trojan named Massiv has been discovered, posing a significant threat to mobile banking users. This malware allows remote control of infected devices and enables Device Takeover attacks, leading to fraudulent transactions from victims' accounts. Massiv is distributed through si…

device takeover

overlay attacks

Published: February 19, 2026

Downloadable IOCs: 2

Click here to see more Attack Reports