Malware Analysis

“Boto Cor-de-Rosa”: Banking Malware Astaroth Pivots to WhatsApp in New Campaign

• Cybercriminals

“Boto Cor-de-Rosa”: Banking Malware Astaroth Pivots to WhatsApp in New Campaign

Do Son January 12, 2026 0

The notorious Brazilian banking malware Astaroth has evolved again, this time turning one of the world’s most...

Read More Read more about “Boto Cor-de-Rosa”: Banking Malware Astaroth Pivots to WhatsApp in New Campaign

RustyWater Rising: MuddyWater Drops PowerShell for Stealthy Rust Implants

• Cyber Security
• Malware

RustyWater Rising: MuddyWater Drops PowerShell for Stealthy Rust Implants

Do Son January 12, 2026 0

The notorious MuddyWater APT group has overhauled its arsenal, ditching its traditional scripting tools for a sophisticated...

Read More Read more about RustyWater Rising: MuddyWater Drops PowerShell for Stealthy Rust Implants

Guloader Malware Rides Wave of Fake Performance Reports

• Malware

Guloader Malware Rides Wave of Fake Performance Reports

Do Son January 9, 2026 0

Cybercriminals are weaponizing workplace anxiety in a new sophisticated phishing campaign. The AhnLab Security Intelligence Center (ASEC)...

Read More Read more about Guloader Malware Rides Wave of Fake Performance Reports

NodeCordRAT: The Trojan Hiding in NPM to Steal Crypto via Discord

• Malware

NodeCordRAT: The Trojan Hiding in NPM to Steal Crypto via Discord

Do Son January 9, 2026 0

The open-source ecosystem has once again been weaponized, this time targeting developers working with cryptocurrency libraries. In...

Read More Read more about NodeCordRAT: The Trojan Hiding in NPM to Steal Crypto via Discord

LockBit 5.0 Sustains Global Ransomware Dominance

• Malware

LockBit 5.0 Sustains Global Ransomware Dominance

Do Son January 9, 2026 0

The hydra of the cybercrime world has grown another head. Since its emergence in late 2019, the...

Read More Read more about LockBit 5.0 Sustains Global Ransomware Dominance

“VM Isolation is Not Absolute”: Researchers Unmask Sophisticated ESXi “Maestro” Exploit

• Malware
• Vulnerability Report

“VM Isolation is Not Absolute”: Researchers Unmask Sophisticated ESXi “Maestro” Exploit

Do Son January 8, 2026 0

In a new report, the Huntress Tactical Response Team details a sophisticated intrusion discovered in December 2025...

Read More Read more about “VM Isolation is Not Absolute”: Researchers Unmask Sophisticated ESXi “Maestro” Exploit

GoBruteforcer Returns: How AI Code Snippets Fueled a 50,000-Server Botnet

• Malware

GoBruteforcer Returns: How AI Code Snippets Fueled a 50,000-Server Botnet

Do Son January 8, 2026 0

A sophisticated new variant of the GoBruteforcer botnet is on the loose, and it’s capitalizing on a...

Read More Read more about GoBruteforcer Returns: How AI Code Snippets Fueled a 50,000-Server Botnet

CrazyHunter: The “Ruthless” Ransomware Stalking Healthcare

• Malware

CrazyHunter: The “Ruthless” Ransomware Stalking Healthcare

Do Son January 8, 2026 0

A new, highly aggressive ransomware strain is cutting a swath through the healthcare sector, leaving hospitals and...

Read More Read more about CrazyHunter: The “Ruthless” Ransomware Stalking Healthcare

Popular Chinese Utility Hijacked to Deploy Browser Malware

• Malware

Popular Chinese Utility Hijacked to Deploy Browser Malware

Do Son January 7, 2026 0

The RedDrip Team at QiAnXin Technology’s Threat Intelligence Center has uncovered a widespread malware campaign hiding inside...

Read More Read more about Popular Chinese Utility Hijacked to Deploy Browser Malware

More_Eggs Malware Deep Dive: Abusing ieuinit.exe and Polymorphic JavaScript

• Malware

More_Eggs Malware Deep Dive: Abusing ieuinit.exe and Polymorphic JavaScript

Do Son May 20, 2025 0

More_Eggs is back—and it’s sneakier than ever. A new report by researcher Tonmoy Jitu dissects a recent...

Read More Read more about More_Eggs Malware Deep Dive: Abusing ieuinit.exe and Polymorphic JavaScript

Skitnet Analysis: Nim, Rust, and DNS Abuse in Advanced Malware Campaign

• Malware

Skitnet Analysis: Nim, Rust, and DNS Abuse in Advanced Malware Campaign

Do Son May 19, 2025 0

Security researchers at Prodaft have published an in-depth analysis of Skitnet, also known as Bossnet—a highly sophisticated...

Read More Read more about Skitnet Analysis: Nim, Rust, and DNS Abuse in Advanced Malware Campaign

Gunra Ransomware: New Threat Analysis Reveals Evasion Tactics

• Malware

Gunra Ransomware: New Threat Analysis Reveals Evasion Tactics

Do Son May 7, 2025 0

CYFIRMA has released an in-depth analysis of a newly emerging cyber threat: Gunra Ransomware. This report details...

Read More Read more about Gunra Ransomware: New Threat Analysis Reveals Evasion Tactics

StealC V2: ThreatLabz Unveils the Evolution of a Stealthy Info-Stealer and Malware Loader

• Malware

StealC V2: ThreatLabz Unveils the Evolution of a Stealthy Info-Stealer and Malware Loader

Do Son May 5, 2025 0

In a comprehensive technical report, ThreatLabz has dissected the inner workings of StealC V2, a major upgrade...

Read More Read more about StealC V2: ThreatLabz Unveils the Evolution of a Stealthy Info-Stealer and Malware Loader

Lumma Stealer: Advanced Obfuscation and Evasion Techniques Analysis

• Malware

Lumma Stealer: Advanced Obfuscation and Evasion Techniques Analysis

Do Son April 25, 2025 0

Lumma Stealer, a prevalent threat since its emergence in 2022, continues to evolve its tactics to evade...

Read More Read more about Lumma Stealer: Advanced Obfuscation and Evasion Techniques Analysis

ToyMaker’s Playbook: Cisco Talos Exposes IAB Tactics Leading to Cactus Ransomware

• Cybercriminals
• Malware

ToyMaker’s Playbook: Cisco Talos Exposes IAB Tactics Leading to Cactus Ransomware

Do Son April 25, 2025 0

Cisco Talos’ 2023 incident response report unveils the operations of “ToyMaker,” a financially motivated Initial Access Broker...

Read More Read more about ToyMaker’s Playbook: Cisco Talos Exposes IAB Tactics Leading to Cactus Ransomware

Unveiling a Multi-Stage Malware Attack: Cloudflare Abuse and AsyncRAT Delivery

• Malware

Unveiling a Multi-Stage Malware Attack: Cloudflare Abuse and AsyncRAT Delivery

Do Son April 23, 2025 0

In a detailed report by the Sekoia Threat Detection & Research (TDR) team, researchers have unveiled a...

Read More Read more about Unveiling a Multi-Stage Malware Attack: Cloudflare Abuse and AsyncRAT Delivery

Gorilla Android Malware: Evolving Threat with Espionage Capabilities

• Malware

Gorilla Android Malware: Evolving Threat with Espionage Capabilities

Do Son April 18, 2025 0

A newly discovered Android malware dubbed Gorilla is quietly emerging as a serious threat, according to a...

Read More Read more about Gorilla Android Malware: Evolving Threat with Espionage Capabilities

DAMASCENED PEACOCK: NCSC Uncovers Sophisticated Malware Targeting UK MOD

• Cyber Security
• Malware

DAMASCENED PEACOCK: NCSC Uncovers Sophisticated Malware Targeting UK MOD

Do Son April 15, 2025 0

In a covert campaign targeting the UK Ministry of Defence, a sophisticated malware dubbed DAMASCENED PEACOCK has...

Read More Read more about DAMASCENED PEACOCK: NCSC Uncovers Sophisticated Malware Targeting UK MOD

ViperSoftX Malware: Arabic-Speaking Attackers Exploit PowerShell in New Cyberattack Campaign

• Cybercriminals
• Malware

ViperSoftX Malware: Arabic-Speaking Attackers Exploit PowerShell in New Cyberattack Campaign

Do Son April 13, 2025 0

AhnLab Security intelligence Center (ASEC) has revealed a cyberattack campaign where Arabic-speaking attackers are distributing ViperSoftX malware,...

Read More Read more about ViperSoftX Malware: Arabic-Speaking Attackers Exploit PowerShell in New Cyberattack Campaign

GPT-4: Unveiling the AI Model’s Prowess in Malware Analysis

• Malware
• Technology

GPT-4: Unveiling the AI Model’s Prowess in Malware Analysis

Do Son November 16, 2023 0

The team of specialists at Check Point recently conducted a study on the capabilities of GPT in...

Read More Read more about GPT-4: Unveiling the AI Model’s Prowess in Malware Analysis