Labs Home

Category

Crimeware

Crimeware

  • Sanctions Be Damned | From Dridex to Macaw, The Evolution of Evil Corp

    Sanctions Be Damned | From Dridex to Macaw, The Evolution of Evil Corp

  • BlackCat Ransomware | Highly-Configurable, Rust-Driven RaaS On The Prowl For Victims

    BlackCat Ransomware | Highly-Configurable, Rust-Driven RaaS On The Prowl For Victims

  • New Rook Ransomware Feeds Off the Code of Babuk

    New Rook Ransomware Feeds Off the Code of Babuk

  • Spook Ransomware | Prometheus Derivative Names Those That Pay, Shames Those That Don’t

    Spook Ransomware | Prometheus Derivative Names Those That Pay, Shames Those That Don’t

  • Karma Ransomware | An Emerging Threat With A Hint of Nemty Pedigree

    Karma Ransomware | An Emerging Threat With A Hint of Nemty Pedigree

  • Hide and Seek | New Zloader Infection Chain Comes With Improved Stealth and Evasion Mechanisms

    Hide and Seek | New Zloader Infection Chain Comes With Improved Stealth and Evasion Mechanisms

  • Hive Attacks | Analysis of the Human-Operated Ransomware Targeting Healthcare

    Hive Attacks | Analysis of the Human-Operated Ransomware Targeting Healthcare

  • Conti Unpacked | Understanding Ransomware Development As a Response to Detection

    Conti Unpacked | Understanding Ransomware Development As a Response to Detection

  • Evasive Maneuvers | Massive IcedID Campaign Aims For Stealth with Benign Macros

    Evasive Maneuvers | Massive IcedID Campaign Aims For Stealth with Benign Macros

  • Gootloader: ‘Initial Access as a Service’ Platform Expands Its Search for High Value Targets

    Gootloader: ‘Initial Access as a Service’ Platform Expands Its Search for High Value Targets

  • Caught in the Cloud | How a Monero Cryptominer Exploits Docker Containers

    Caught in the Cloud | How a Monero Cryptominer Exploits Docker Containers

  • Avaddon RaaS | Breaks Public Decryptor, Continues On Rampage

    Avaddon RaaS | Breaks Public Decryptor, Continues On Rampage