Browsing: C2

Summary Points APT37 used spearphishing and malicious LNK files to install NarwhalRAT, enabling data theft…

Top Highlights Cybercriminals, possibly linked to North Korea, are evolving blockchain-based command-and-control techniques by embedding…

Summary Points DOUBLECUP uses steganographic PNG images and environmental keying for malware delivery, enabling covert,…

Top Highlights Modern ransomware groups employ legitimate tools (e.g., Sliver, native admin tools) and compromised…

Quick Takeaways The Larva-24009 actor primarily uses phishing emails with decoy documents and LNK malware…

Top Highlights Chinese threat actors are deploying sophisticated, memory-resident backdoors (OctLurk and SilkLurk) to conduct…

Fast Facts Attackers use a multi-stage chain involving a Go-based loader (HollowFrame) and Rust-based backdoor…

Essential Insights North Korean-linked threat actors utilize sophisticated macOS malvertising campaigns that induce panic through…

Summary Points Toy Ghouls’ new GenieLocker ransomware targets Russian manufacturing and related sectors by exploiting…

Essential Insights The Flying Eagle Android RAT framework, circulated via criminal Telegram channels, enables payment-password…