Browsing: C2

Summary Points The threat actor Armored Likho targets government and power sectors using sophisticated, obfuscated…

Quick Takeaways Chinese-speaking threat group CL-STA-1062 has been targeting Southeast Asian government and critical energy…

Essential Insights Gaslight malware employs deception by embedding prompt injection payloads that sabotage AI analysis…

Summary Points Europol and partners disrupted the command-and-control infrastructure of Amadey loader/botnet and StealC info…

Essential Insights Operation Endgame successfully disrupted the StealC infostealer ecosystem, seizing over 25 million credentials…

Fast Facts Malicious npm packages like "aes-decode-runner-pro" and "postcss-minify-selector-parser" embed JavaScript droppers that deliver a…

Fast Facts A new PHP webshell, ZypeerShell, has emerged on GitHub, featuring capabilities typical of…

Fast Facts Attackers exploited legitimate Microsoft Teams infrastructure by utilizing a custom Go-based backdoor, Backdoor.Turn,…

Quick Takeaways Attackers can establish persistent, covert access by installing OpenSSH and Tailscale, bypassing traditional…

Fast Facts Malicious LNK files disguised as resumes deliver backdoor malware by exploiting legitimate decoys…