Tag: trojanized installers

2 Attack Reports | 0 Vulnerabilities

Attack reports

Bumblebee Malware SEO Poisoning Campaign Leads to Akira Ransomware Deployment

A coordinated threat campaign has been identified leveraging SEO poisoning to distribute Bumblebee malware via trojanized installers of IT management tools. The campaign targets users searching for legitimate software like ManageEngine OpManager. Upon execution, Bumblebee establishes initial access…

lateral movement

data exfiltration

credential dumping

akira ransomware

trojanized installers

Published: August 5, 2025

Downloadable IOCs: 19

NSIS Abuse and sRDI Shellcode: Anatomy of the Winos 4.0 Campaign

A malware campaign using fake software installers to deliver Winos v4.0, a memory-resident malware, has been tracked throughout 2025. The campaign, dubbed Catena, employs trojanized NSIS installers, reflective DLL loading, and shellcode-embedded INI files to evade detection. It stages payloads enti…

chinese-speaking targets

memory-resident malware

reflective dll injection

trojanized installers

Published: May 27, 2025

Downloadable IOCs: 31

Click here to see more Attack Reports