Skip to content
- GhostShell (MB-0009): Targeting Ukraine’s UAV Operations and Defense Supply Chain
- UAC-0244 / UAC-0247: Malware Targeting FPV drone operators
- UAC-0184: From HTA to a Signed Network Stack
- 3.000 “Stealer” Samples, One Misconfigured Apache Server
- Obfuscation Without Effort: Breaking a UAC-0226 GIFTEDCROOK Stealer
- Observed Telegram Bot Naming Patterns in Recent MuddyWater Malware Activity
- APT28: Geofencing as a Targeting Signal (CVE-2026-21509 Campaign)
- RustyStealer: Your Compiler Is Snitching on You
- Gamaredon: Now Downloading via Windows Updates Best Friend “BITS”
- MuddyWater: When Your Build System Becomes an IOC – “Jacob”
- Gamaredon: Same Goal, Fewer Fingerprints
- GamaWiper Explained: Gamaredon’s “New” Anti-Analysis Weapon
- QuasarRAT Malware Campaign using CVE-2025-6218
- Analyzing Malware distributed by Xubuntu.org
- APT36 – “Abaris” Deobfuscating VB Dropper
- Whisper – Interesting Sandbox evasion?
- XORDDoS
