Threat, Research, and Solution in Cybersecurity Realms

Get started with our best stories

Fake AI Installer Campaign Delivering an In-Memory Stealer via the ClickFix Technique

The latest ClickFix campaign has evolved beyond fake CAPTCHA prompts, ClickFix is now disguised as installation instructions for coding assistant software.

Threat IntelligenceThreat Hunting

Betting on Risk: An Analysis of Spyware Disguised as Online Gambling App

The rise of online gambling in Indonesia has created a loophole that is often exploited as a means of spreading spyware targeting mobile device users.

Penetration Testing

What I Learned From My First Brute-Force Attack Simulation

Ever wondered how hackers actually break into devices over public Wi-Fi? In this article, We walk through a real brute-force attack simulation, from scanning a network with Nmap to cracking login credentials using Hydra and SecLists.

Threat IntelligenceThreat Hunting Malware

Uncovering New Indicator in RagaSerpent’s ‘Tax Audit’ Malware Campaign

Analyzing RagaSerpent’s “Tax Audit” malware campaign to uncover new indicators of compromise, enhancing detection accuracy and strengthening threat intelligence capabilities while staying ahead of evolving attack techniques.

AI EngineeringAI Safety LLM Limitations

AI is trained to be safe. Engineers are trained to find what breaks.

Originally published on LinkedIn — reposting here because the thesis lands hardest in security work, where the gap between code that looks right and code that is right is the difference between green dashboards and a breach. A product manager asks an AI for a "one-click buy button."...

malware analysisMalware InfoStealer

Lua-JIT SmartLoader: Analyzing the GitHub Campaign Delivering Stealer

SmartLoader Campaign The SmartLoader campaign represents a significant escalation in the sophistication of commodity malware distribution, establishing a critical new threat vector for organizational defense. By combining advanced evasion techniques with large-scale automation, this multi-stage loader poses a significant threat that demands an immediate reassessment of existing security...

Malwareransomware Stealer Malware

Static Analysis of Akira Ransomware

Akira (REDBIKE) ransomware, emerging in 2023, is a sophisticated operation linked to the former Conti syndicate, extorting $42M from over 350 SMBs. It targets Windows, Linux, and ESXi systems, using a complex hybrid cryptosystem with ChaCha20, AES-256, and RSA-4096 via the Nettle library.

See what we’ve
written lately

Meet our author Meet our authors Meet our top authors

Educational SeriesEducation

Simple PDF Digital Signature Validation

We are discussing in this blog post a very simple example of digital signature validation within a PDF file. We hope that this simple example will be enough to provide a starting point for understanding how validation works, and also how digital signatures in PDF work.

Software Exploitation

Exploiting Digital Signatures on PDF Documents

In this article, I try to discuss in more detail the types of attacks against digital signatures on PDF documents as discussed by researchers at the Ruhr University in Germany, where the vulnerability classes were discovered and first published by them.

Detection Engineering

Streamlining Suricata / Snort Signature Development with Dalton

Developed by Secureworks, Dalton provides an intuitive web-based interface to configure and run IDS engines with user-provided packet captures, rulesets (pre-defined or custom), and configuration files

MalwareLearning Series: Threat Hunting

Threat Hunting Series: Malware Analysis Tools

In this hands-on learning series, you will gain a thorough understanding of threat hunting through malware analysis. The series start with an introduction to various tools used by security professionals, and then going through exploration of how to dissect and understand malicious software attacks

Threat Intelligence

Understanding the Diverse Sources and Platforms of Threat Intelligence

We examine the different sources of threat information and the type of information which can be obtained from each. We also discuss how leveraging multiple sources for threat intelligence can improve cyber resilience, and help protect against potential threats

ResearchDetection Engineering

Automated Suricata-to-ATT&CK Mapper using Machine Learning

Machine learning algorithms can be trained to recognize patterns in the data and make accurate predictions about the appropriate mapping of Suricata rules to MITRE ATT&CK tactics and techniques