← Back to Blog

Threat Category: Query

In-Memory Loader Drops ScreenConnect 7 min read In-Memory Loader Drops ScreenConnect by Adam Swan Silver Fox Wraps ValleyRAT in ZPAQ and a ByteDance Binary: A Telegram Chinese Language Pack MSI Lure 8 min read Silver Fox Wraps ValleyRAT in ZPAQ and a ByteDance Binary: A Telegram Chinese Language Pack MSI Lure by Adam Swan Fake Windows Support Site Delivers Password-Stealing Malware 6 min read Fake Windows Support Site Delivers Password-Stealing Malware by Adam Swan ClickFix to MaaS: Inside a Modular Windows RAT and Its Control Panel 6 min read ClickFix to MaaS: Inside a Modular Windows RAT and Its Control Panel by Adam Swan Remus: Unpacking the 64-bit Evolution of the Lumma Stealer 7 min read Remus: Unpacking the 64-bit Evolution of the Lumma Stealer by Adam Swan New Whitepaper: BPFDoor Variants Hide in Plain Sight 7 min read New Whitepaper: BPFDoor Variants Hide in Plain Sight by Adam Swan NightSpire Ransomware Evolves: Updated Techniques and Detection Tips 6 min read NightSpire Ransomware Evolves: Updated Techniques and Detection Tips by Adam Swan DesckVB RAT Analysis: From JavaScript Loader to Fileless .NET RAT 7 min read DesckVB RAT Analysis: From JavaScript Loader to Fileless .NET RAT by Adam Swan ChainShell: MuddyWater & Russian MaaS 9 min read ChainShell: MuddyWater & Russian MaaS by Adam Swan hermes-px: A Fake Privacy Proxy Exfiltrating Prompts and Tampering with Claude Code 7 min read hermes-px: A Fake Privacy Proxy Exfiltrating Prompts and Tampering with Claude Code by Adam Swan
Search:
Follow us on:
Archive
Tags