CybersecurityDLL sideloadingInfrastructureMalware TechnologiesMDRPowerShellRAT TrojanSEOThe SOC filesThreat huntingVBS
The SOC Files: ScreenConnect masked as freeware. An inside look at a large-scale campaign
Introduction To access compromised systems, threat...
.NETAPTAPT (Targeted attacks)APT reportsBrowserCookiesCredentials theftCybersecurityDLLDLL sideloadingGoogle ChromeMalwareMalware descriptionsMalware TechnologiesMDROAuthToddyCatWeb threatsWindows malware
ToddyCat: your hidden email assistant. Part 2
Introduction We continue to share details...
BackdoorBYOVDcrimewareCrimeware reportscybercrimeCybersecurityData EncryptionDriversEDR killersMalwareMalware descriptionsMalware TechnologiesRaaSRansomwareThe GentlemenTrojanUnix and macOS malwareWindows malware
The Gentlemen are knocking: сustom backdoors and evolving tactics
Introduction This year saw the emergence...
CobaltStrikeCybersecurityDLL hijackingMalwareMalware descriptionsMalware TechnologiesSharkLoaderStrikeSharkTargeted attacksVulnerabilitiesWindows malware
StrikeShark: investigating a new campaign delivering Cobalt Strike through SharkLoader
Introduction During our research of activity...
CybersecurityMalwareMalware descriptionsMalware TechnologiesMicrosoft WindowsRMMVBSWhatsAppWindows malware
A VBScript campaign distributed through WhatsApp deploying RMM software
In June 2026, we observed a...
BackdoorCybersecurityLummaMalwareMalware descriptionsMalware TechnologiesMinerSteamTrojan-stealerWindows malware
Dozens of malicious wallpapers found on Steam Workshop: gamers’ accounts at risk
Since late 2025, malware has been...
ArgamalCybersecurityGaming malwareGReAT researchMalwareMalware descriptionsMalware TechnologiesRATTrojanWindows malware
Argamal: Malware hidden in hentai games
In April 2026, we discovered a...
Browser PluginsCybersecurityMalware descriptionsMalware TechnologiesMicrosoft WindowsMinerPhishingPiracyRAT TrojanSilentCryptoMinerWindows malwareXMRig
Pirates in the crosshairs: how one cybercrime gang has been infecting book, movie, and TV show fans for years
Introduction In late April 2026, a...
APTAPT (Targeted attacks)APT reportsBackdoorCloud AtlasCybersecurityMalware descriptionsMalware TechnologiesMicrosoft WindowsPhishingPowerShellSSHTargeted attacksWindows malware
Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload
In 2025, we observed pervasive SSH...