AgentTesla

Trusted Tool Turned Traitor: Signed ‘ahost.exe’ Weaponized to Sideload Malware

• Malware

Trusted Tool Turned Traitor: Signed ‘ahost.exe’ Weaponized to Sideload Malware

Do Son January 16, 2026 0

Attackers exploit legitimate ahost.exe via DLL sideloading to deploy RATs & stealers. Trusted dev utility bypasses security scanners. Watch out.

GuLoader Campaign Targets European Industrial Sector with Evolving Evasion Techniques

• Malware

GuLoader Campaign Targets European Industrial Sector with Evolving Evasion Techniques

Do Son November 11, 2024 0

Uncover the targeted GuLoader campaign impacting European industrial and engineering companies. Learn about the evasive malware and its sophisticated tactics.

Infostealers Use Telegram Bots for Data Exfiltration, Exploiting a Growing Threat

• Malware

Infostealers Use Telegram Bots for Data Exfiltration, Exploiting a Growing Threat

Do Son October 18, 2024 0

Tavares highlights that between October 2024 and now, the team observed 5 million logs containing stolen credentials from 1,800 Telegram bots

Malware Exploiting IoT Devices on the Rise, SonicWall Warns

• Cyber Security
• Malware

Malware Exploiting IoT Devices on the Rise, SonicWall Warns

Do Son July 30, 2024 0

Learn about the increase in IoT malware and supply chain attacks in 2024. Get insights from SonicWall's mid-year Cyber Threat Report.

UNC1151 Escalates Cyber Warfare: Attacks Target Ukrainian Defense Infrastructure

• Cyber Security
• Malware

UNC1151 Escalates Cyber Warfare: Attacks Target Ukrainian Defense Infrastructure

Do Son June 4, 2024 0

UNC1151 employed DLL loaders that downloaded an encrypted JPG file, which was then decrypted to deploy a final payload executable.

Hackers Employ Advanced Fileless Attack to Implant AgentTesla Malware

• Malware

Hackers Employ Advanced Fileless Attack to Implant AgentTesla Malware

Do Son April 25, 2024 0

Threat research team has recently uncovered sophisticated .NET managed code injection methods employed by the notorious AgentTesla malware

Stealthy New Golang Trojan Exploits Fake Certificates for Evasive Communication

• Malware

Stealthy New Golang Trojan Exploits Fake Certificates for Evasive Communication

Do Son March 27, 2024 0

Security researchers at SonicWall Capture Labs have discovered a cunning new Trojan written in the Golang programming language

AgentTesla and Beyond: McAfee Reveals Diverse VBS Malware Tactics

• Malware

AgentTesla and Beyond: McAfee Reveals Diverse VBS Malware Tactics

Do Son January 17, 2024 0

Remcos RAT malware communicates with a remote IP address and initiates malicious activities, including keylogging and capturing screenshots