Malware

DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors

From a Single Alert to 1,000 Files: Inside an Exposed WebDAV Malware Delivery Lab

Malware à la Mode: Tracking Dropping Elephant Tradecraft Through a China-Themed Loader Chain

When IT Support Calls: Dissecting a ModeloRAT Campaign from Teams to Domain Compromise

Kyber Ransomware Double Trouble: Windows and ESXi Attacks Explained

The Chrysalis Backdoor: A Deep Dive into Lotus Blossom’s toolkit

Inside Russian Market: Uncovering the Botnet Empire

An Earth-Shattering Kaboom: Bringing a Physical ICS Penetration Testing Environment to Life (Part 2)

Anna Katarina Quinn

An Earth-Shattering Kaboom: Bringing a Physical ICS Penetration Testing Environment to Life (Part 1)

Anna Katarina Quinn

Emerging Trends in AI-Related Cyberthreats in 2025: Impacts on Organizational Cybersecurity

Jeremy Makowski

Filch Stealer: A new infostealer leveraging old techniques

BlackSuit Continues Social Engineering Attacks in Wake of Black Basta’s Internal Conflict

NSIS Abuse and sRDI Shellcode: Anatomy of the Winos 4.0 Campaign

Modular Java Backdoor Dropped in Cleo Exploitation Campaign

Christiaan Beek

Black Basta Ransomware Campaign Drops Zbot, DarkGate, and Custom Malware

Why Cybercriminals Are Not Necessarily Embracing AI

Christiaan Beek

New “CleverSoar” Installer Targets Chinese and Vietnamese Users

Natalie Zargarov

A Bag of RATs: VenomRAT vs. AsyncRAT

LodaRAT: Established Malware, New Victim Patterns

Natalie Zargarov

Malware Campaign Lures Users With Fake W2 Form

Ongoing Malvertising Campaign Leads to Ransomware