DanaBot

“DanaBleed” Flaw Exposes DanaBot’s Inner Workings for Three Years

• Malware

“DanaBleed” Flaw Exposes DanaBot’s Inner Workings for Three Years

Do Son June 11, 2025 0

DanaBot's "DanaBleed" memory leak, active for 3 years, exposed C2 server data, aiding law enforcement in Operation Endgame takedown.

Booking.com Spoofed in ClickFix Malware Surge Targeting Hotels and Travel Sector

• Malware

Booking.com Spoofed in ClickFix Malware Surge Targeting Hotels and Travel Sector

Do Son June 6, 2025 0

A sophisticated "ClickFix" phishing campaign uses fake Booking.com CAPTCHAs to deliver RATs and info stealers to the hotel and travel industry.

DanaBot Takedown: 16 Indicted for $50M Malware Operation

• Cybercriminals

DanaBot Takedown: 16 Indicted for $50M Malware Operation

Do Son May 23, 2025 0

The U.S. Department of Justice charged 16 individuals for the $50M DanaBot malware operation, which infected over 300,000 computers worldwide.

JPHP Interpreter Used to Distribute Downloader Malware

• Malware

JPHP Interpreter Used to Distribute Downloader Malware

Do Son March 19, 2025 0

Uncover the risks associated with JPHP and how it exploits the JPHP interpreter for malicious activities.

Booking.com Impersonated in Phishing Campaign Delivering Credential-Stealing Malware

• Malware

Booking.com Impersonated in Phishing Campaign Delivering Credential-Stealing Malware

Do Son March 15, 2025 0

Stay informed about Booking Phishing schemes. Discover how attackers use social engineering to steal credentials in this campaign.

Compromised Credentials: New Cyberattack Exploits Industry Email Accounts

• Malware

Compromised Credentials: New Cyberattack Exploits Industry Email Accounts

Do Son September 24, 2024 0

Transport and logistics companies in North America targeted in a sophisticated cyberattack. Learn about the tactics used and how to protect your business.

Tusk Campaign: Russian Cybercriminals Target Gaming & Crypto

• Cyber Security
• Malware

Tusk Campaign: Russian Cybercriminals Target Gaming & Crypto

Do Son August 16, 2024 0

Uncover the Tusk cyber campaign targeting cryptocurrency theft and personal data. Don't fall victim to the cunning tactics of Russian-speaking cybercriminals.

New D3F@ck Loader Exploits Google Ads, Abuses Trusted Certificates to Bypass Security

• Malware

New D3F@ck Loader Exploits Google Ads, Abuses Trusted Certificates to Bypass Security

Do Son May 5, 2024 0

The sophistication of the D3F@ck Loader extends to its management of these payloads. It retrieves a .NET dropper from the C2 server

Decoding the Web Injection Malware Campaign of 2023

• Malware

Decoding the Web Injection Malware Campaign of 2023

Do Son December 20, 2023 0

a malicious software distribution campaign they uncovered, which uses JavaScript web injections to steal banking data from 40 banks