Quasar RAT is a Remote Access Trojan (RAT) that stands out for its open-source nature. It supports a wide range of functionalities like keylogging, file transfer, victim screen/webcam monitoring, c...

AgentTesla is spreading through phishing emails. This malware can steal sensitive information like login credentials and keystrokes. In this blog, I’ll be analyzing a recently collected sample from...

Xenomorph has been evolving rapidly since its discovery in early 2022, adding continuous features over the months including keylogging, call forwarding, stealing cookies, and even automating fraudu...

Xenomorph, a nasty piece of Android malware, Initially targeting European banks in early 2022, recently set its sights on over 30 US banks. This adaptable malware logs user activity and intercepts ...

RedLine Stealer is an information stealer gathering data such as passwords, credit card numbers, and cryptocurrency wallet addresses. It is a modular malware, meaning that it can be customized to s...

BlackCat (also known as Noberus or ALPHV) is a sophisticated ransomware-as-a-service (RaaS) that has been used in operations since November 2021. It is believed to be a successor to the REvil, Dark...

In February 2023, Microsoft observed a new Remcos RAT campaign targeting US accounting and tax return preparation firms. The phishing attacks began in February 2023. The malicious LNK files were ho...

WhiteSnake is an information-stealer/RAT that extracts a range of sensitive information from infected computers. It’s considered to be MaaS as it’s being sold on underground forums with a monthly f...

HermeticWiper is a destructive piece of malware that was used in the early stages of the Russian invasion of Ukraine early in 2022 against Ukranian facilities. The way it wipes out the disk while ...