Deep Dive Into TrickBot Executor Module “mexec”: Reversing the Dropper VariantContinuing our earlier analysis of the TrickBot Executor Module "mexec", we take a look at the dropper variant and reveal how it carries its payload onboardRead More
CrimewareAntonio PirozziFeb 23, 2022Sanctions Be Damned | From Dridex to Macaw, The Evolution of Evil Corp
CrimewareJim WalterJan 18, 2022BlackCat Ransomware | Highly-Configurable, Rust-Driven RaaS On The Prowl For Victims
CrimewareJim WalterOct 28, 2021Spook Ransomware | Prometheus Derivative Names Those That Pay, Shames Those That Don’t
CrimewareAntonis TerefosOct 18, 2021Karma Ransomware | An Emerging Threat With A Hint of Nemty Pedigree
CrimewareAntonio PirozziSep 13, 2021Hide and Seek | New Zloader Infection Chain Comes With Improved Stealth and Evasion Mechanisms
CrimewareJim WalterAug 23, 2021Hive Attacks | Analysis of the Human-Operated Ransomware Targeting Healthcare
CrimewareIdan WeizmanJul 8, 2021Conti Unpacked | Understanding Ransomware Development As a Response to Detection
CrimewareMarco FigueroaJun 25, 2021Evasive Maneuvers | Massive IcedID Campaign Aims For Stealth with Benign Macros
CrimewareAntonio PirozziJun 16, 2021Gootloader: ‘Initial Access as a Service’ Platform Expands Its Search for High Value Targets
CrimewareMarco FigueroaMay 20, 2021Caught in the Cloud | How a Monero Cryptominer Exploits Docker Containers