DFIR, Malware Research, Threat Intelligence & More

New JavaScript Malware - Fake DocuSign Invoices

Decoding a New JavaScript Malware Campaign Recently researchers from HuntressLabs shared data about a case where a fake DocuSign document resulted in a network compromise involving AvosLocker &amp...

Mar 13, 2023 Malware Research, Loaders & Other Commodity Malware

Using ChatGPT to Visualize Ransomware Leak Site Data

Using ChatGPT to Visualize Ransomware Leak Site Data Recently I wanted to test out if I could use OpenAI’s ChatGPT to assist with analyzing trends around ransomware leak site postings. Project ...

Dec 28, 2022 Threat Intelligence, Ransomware

Yanlouwang Ransomware Leaks

Yanlouwang Ransomware Leaks Analysis On October 31st the twitter account @yanluowangleaks published communication data from Yanlouwang ransomware. The data appear to be leaked from matrix chat ser...

Oct 30, 2022 Threat Intelligence, Ransomware

Minecraft & IT software targeted with fake websites & Remote Access Trojans

Minecraft & IT software targeted with fake websites & Remote Access Trojans Background research In January of 2022 Félix Aimé from SEKOIA shared a detailed twitter thread about a t...

Jul 2, 2022 Malware Research, Loaders & Other Commodity Malware

ViperSoftx Expanded - Torrents lead to JavaScript-based Cryptocurrency Stealers

ViperSoftx Expanded - Torrents lead to JavaScript-based Cryptocurrency Stealers Table of Contents: Prior Research PowerShell Analysis and Pivoting Malware Distribution Browser Ext...

May 24, 2022 Malware Research, InfoStealers

Choziosi Loader Analysis

Choziosi Loader: Multi-platform campaign delivering browser extension malware In Janurary 2022 a new malware campaign delivering chrome extensions was identified by @x3ph1. Orginally this m...

Apr 25, 2022 Malware Research, Browser Hijackers

HeatMap Visualization with Python

Motivation and Game Plan Recently I wanted to build a tool to visualize timestamp data, specifically to display a heatmap of activity by hour and day of week. I started off by reading over this tu...

Apr 8, 2022 Threat Intelligence, Resources & Guides

Conti Ransomware Leaks

The Conti Ransomware Leaks Background On February 25th 2022 the Conti Ransomware crew declared they support the Russian government: “The Conti Team is official announcing a full support of Russ...

Mar 1, 2022 Threat Intelligence, Ransomware

Malware Analysis Resources and Tools

Resources for Malware Analysis Online Tools MalPedia: https://malpedia.caad.fkie.fraunhofer.de/library VirusTotal: https://www.virustotal.com/ MalwareBazaar: https://b...

Nov 3, 2021 Malware Research, Resources & Guides

Tweetdeck for Threat Intel

Twitter is undeniably a great resource for learning about security. A lot of people share information on malware, phishing, new vulnerabilities, exploits and more. Sometimes it can be difficu...

May 12, 2020 Threat Intelligence, Resources & Guides

1
2
1 / 2