Fake AI Installer Campaign Delivering an In-Memory Stealer via the ClickFix Technique
The latest ClickFix campaign has evolved beyond fake CAPTCHA prompts, ClickFix is now disguised as installation instructions for coding assistant software.
Threat, Research, and Solution in Cybersecurity Realms
Get the email newsletter and unlock access to members-only content and updates
Get started with our best stories
Betting on Risk: An Analysis of Spyware Disguised as Online Gambling App
The rise of online gambling in Indonesia has created a loophole that is often exploited as a means of spreading spyware targeting mobile device users.
What I Learned From My First Brute-Force Attack Simulation
Ever wondered how hackers actually break into devices over public Wi-Fi? In this article, We walk through a real brute-force attack simulation, from scanning a network with Nmap to cracking login credentials using Hydra and SecLists.
Uncovering New Indicator in RagaSerpent’s ‘Tax Audit’ Malware Campaign
Analyzing RagaSerpent’s “Tax Audit” malware campaign to uncover new indicators of compromise, enhancing detection accuracy and strengthening threat intelligence capabilities while staying ahead of evolving attack techniques.
AI is trained to be safe. Engineers are trained to find what breaks.
Originally published on LinkedIn — reposting here because the thesis lands hardest in security work, where the gap between code that looks right and code that is right is the difference between green dashboards and a breach. A product manager asks an AI for a "one-click buy button."...
Lua-JIT SmartLoader: Analyzing the GitHub Campaign Delivering Stealer
SmartLoader Campaign The SmartLoader campaign represents a significant escalation in the sophistication of commodity malware distribution, establishing a critical new threat vector for organizational defense. By combining advanced evasion techniques with large-scale automation, this multi-stage loader poses a significant threat that demands an immediate reassessment of existing security...
Static Analysis of Akira Ransomware
Akira (REDBIKE) ransomware, emerging in 2023, is a sophisticated operation linked to the former Conti syndicate, extorting $42M from over 350 SMBs. It targets Windows, Linux, and ESXi systems, using a complex hybrid cryptosystem with ChaCha20, AES-256, and RSA-4096 via the Nettle library.
Android CrackMe App: Can You Find the Key?
Test your reverse engineering skills with CrackMe Android App! Solve 3 levels of challenges, find the hidden secret key, and share your findings. Can you crack it?
AI as a Cybersecurity Companion: Self-hosted LLMs for Threat Analysis
Developing a Spring Boot LLM chatbot and Cygen, a Retrieval-Augmented Generation system, to enhance cybersecurity with AI-driven threat analysis.
Decoding Shellcode: Implications for Security & Defense
Shellcode: Invisible code that can take control of a computer, steal data, and cause major problems. This article provides a basic introduction to shellcode, aiming to give you a foundation for understanding cybersecurity.
Pwning Android: A Hacker's Guide to Mobile App Security
This article is focusing on reverse engineering and static analysis techniques. It explains how to crack the UnCrackable-Level1.apk challenge using tools like JADX, ADB, and Android Studio, uncovering hidden secrets through code analysis and decryption.
AI — Chatbot with RAG (Retrieval-Augmented Generation)
This article shows how IntellIBroń ChatBot AI technology works in the backend. We utilise our own developed RAG. Retrieval-Augmented Generation (RAG) is a technique that combines retrieval-based and generative methods to produce more accurate and relevant responses.
IntelliBroń RAG dan Regenerasi Talenta Keamanan Siber
"Sudah dilatih selama setahun, talenta junior tersebut ternyata lebih memilih untuk pindah ke perusahaan lain karena ditawari gaji yang lebih besar". Sounds familiar? Tulisan ini akan membahas salah satu fitur penting dan juga filosofi latar belakang IntelliBron sebagai cybersecurity companion.