Fake AI Installer Campaign Delivering an In-Memory Stealer via the ClickFix Technique
The latest ClickFix campaign has evolved beyond fake CAPTCHA prompts, ClickFix is now disguised as installation instructions for coding assistant software.
Threat, Research, and Solution in Cybersecurity Realms
Get the email newsletter and unlock access to members-only content and updates
Get started with our best stories
Betting on Risk: An Analysis of Spyware Disguised as Online Gambling App
The rise of online gambling in Indonesia has created a loophole that is often exploited as a means of spreading spyware targeting mobile device users.
What I Learned From My First Brute-Force Attack Simulation
Ever wondered how hackers actually break into devices over public Wi-Fi? In this article, We walk through a real brute-force attack simulation, from scanning a network with Nmap to cracking login credentials using Hydra and SecLists.
Uncovering New Indicator in RagaSerpent’s ‘Tax Audit’ Malware Campaign
Analyzing RagaSerpent’s “Tax Audit” malware campaign to uncover new indicators of compromise, enhancing detection accuracy and strengthening threat intelligence capabilities while staying ahead of evolving attack techniques.
AI is trained to be safe. Engineers are trained to find what breaks.
Originally published on LinkedIn — reposting here because the thesis lands hardest in security work, where the gap between code that looks right and code that is right is the difference between green dashboards and a breach. A product manager asks an AI for a "one-click buy button."...
Lua-JIT SmartLoader: Analyzing the GitHub Campaign Delivering Stealer
SmartLoader Campaign The SmartLoader campaign represents a significant escalation in the sophistication of commodity malware distribution, establishing a critical new threat vector for organizational defense. By combining advanced evasion techniques with large-scale automation, this multi-stage loader poses a significant threat that demands an immediate reassessment of existing security...
Static Analysis of Akira Ransomware
Akira (REDBIKE) ransomware, emerging in 2023, is a sophisticated operation linked to the former Conti syndicate, extorting $42M from over 350 SMBs. It targets Windows, Linux, and ESXi systems, using a complex hybrid cryptosystem with ChaCha20, AES-256, and RSA-4096 via the Nettle library.
IntelliBroń Malware Detection and Analysis: DarkCrystal RAT
This article demonstrates how the IT professionals and analyst can swiftly identify and assess incidents indicating that an asset has been compromised by DarkCrystal RAT using Bellatrix Dashboard, an intuitive dashboard designed for IT professionals and analysts.
Coaching Tiger, Hidden Dragon: The Art of Coaching the Matrix for Fun and Profit
How can we coach the machines to learn cybersecurity knowledge from humans?
Mediatek Wireless Drivers Bug on 5.15
IntelliBron provides an option for retailers and small businesses by using the small form factor of computers to detect threats.
Cybersecurity Companion
While you can train for cybersecurity in simulated environments, labs or schools, experiencing and analysing real incidents with genuine criminals and combating real hacktivism only happens in real industry settings.
DevSecOps Culture Implementation for Building IntelliBroń [Part: 1]
The development phase of IntelliBron began in the late of 2022. Our development team employs Agile+DevSecOps methodology to construct the product. Throughout this article series, we will elucidate how DevSecOps is used in our development endeavour.
Content Disarm & Reconstruction Technology
This article discusses the different detection and protection methods in Malware-sphere: Signature-based, SandBox, Artificial Intelligence and Content Disarm & Reconstruction (CDR).
Recommended
