Fake AI Installer Campaign Delivering an In-Memory Stealer via the ClickFix Technique
The latest ClickFix campaign has evolved beyond fake CAPTCHA prompts, ClickFix is now disguised as installation instructions for coding assistant software.
Threat, Research, and Solution in Cybersecurity Realms
Get the email newsletter and unlock access to members-only content and updates
Get started with our best stories
Betting on Risk: An Analysis of Spyware Disguised as Online Gambling App
The rise of online gambling in Indonesia has created a loophole that is often exploited as a means of spreading spyware targeting mobile device users.
What I Learned From My First Brute-Force Attack Simulation
Ever wondered how hackers actually break into devices over public Wi-Fi? In this article, We walk through a real brute-force attack simulation, from scanning a network with Nmap to cracking login credentials using Hydra and SecLists.
Uncovering New Indicator in RagaSerpent’s ‘Tax Audit’ Malware Campaign
Analyzing RagaSerpent’s “Tax Audit” malware campaign to uncover new indicators of compromise, enhancing detection accuracy and strengthening threat intelligence capabilities while staying ahead of evolving attack techniques.
AI is trained to be safe. Engineers are trained to find what breaks.
Originally published on LinkedIn — reposting here because the thesis lands hardest in security work, where the gap between code that looks right and code that is right is the difference between green dashboards and a breach. A product manager asks an AI for a "one-click buy button."...
Lua-JIT SmartLoader: Analyzing the GitHub Campaign Delivering Stealer
SmartLoader Campaign The SmartLoader campaign represents a significant escalation in the sophistication of commodity malware distribution, establishing a critical new threat vector for organizational defense. By combining advanced evasion techniques with large-scale automation, this multi-stage loader poses a significant threat that demands an immediate reassessment of existing security...
Static Analysis of Akira Ransomware
Akira (REDBIKE) ransomware, emerging in 2023, is a sophisticated operation linked to the former Conti syndicate, extorting $42M from over 350 SMBs. It targets Windows, Linux, and ESXi systems, using a complex hybrid cryptosystem with ChaCha20, AES-256, and RSA-4096 via the Nettle library.
Stealer Logs: Perspectives on Attack and Defense in a Silent Epidemic, and How Broń Vault Automates the Parsing Process
1. The Global Scale and Impact of Stealer Malware 1.1. Breaking In Without ‘Breaking’ Anything What if we told you that breaking into a system today often requires no complex exploits at all? Despite years of headlines and hacker movie stereotypes, hacking is still commonly associated with techniques like...
AI and Human Collaboration: Redline Stealer Infection Analysis
Introduction In today’s rapidly evolving digital battlefield, staying ahead of cyber threats has become a real challenge, with recent incidents showing us that attackers are getting smarter and faster. For the teams on the front lines in security operations centers, it's like trying to find a needle...
Enhancing Cybersecurity Intelligence: GraphRAG x OpenCTI
GraphRAG + OpenCTI transforms security operations by enabling AI to navigate threat intelligence relationships, not just isolated facts. This integration delivers contextual insights and always-current intelligence—turning complex data into actionable defense strategies.
Android — Safe Logging Practices
Learn safe logging practices for Android apps to prevent exposing sensitive data. Discover how Timber library filters debug logs in production, automatically manages tags, and helps implement proper log levels for security.
Enhancing e-KYC Systems with Searchable Symmetric Encryption and Blockchain Tech
Integrating Searchable Symmetric Encryption with blockchain to enhance e-KYC systems, dramatically improving search speed while maintaining security.
Zero Knowledge Proof with ZoKrates
Introduction Zero Knowledge Proof Zero-Knowledge Proof (ZKP) is a cryptographic method where one party (the prover) can convince another party (the verifier) that a statement is true without revealing any information beyond the fact that it is indeed true. Imagine proving you know a password without ever showing the...