China-Linked JDY Botnet Expands to Over 1,500 Devices for Cyber Reconnaissance
Cybersecurity researchers at Lumen's Black Lotus Labs have identified a significant expansion of the JDY botnet, a covert network linked to China-nexus…
Category: Malware
Malware families, payloads, loaders, ransomware and related tooling.
SPECTRALVIPER Backdoor Analysis
SPECTRALVIPER is a backdoor used by OceanLotus, first documented by Elastic Security Labs in June 2023. It is deployed via DLL side-loading,…
FireAnt Metakit Software Platform
FireAnt Metakit is a popular software platform used by stock investors in Vietnam. It was compromised in a supply chain attack by…
ZiChatBot Malware Family
ZiChatBot is a previously unknown malware family discovered by Kaspersky on PyPI, delivered via malicious packages and linked to OceanLotus through dropper…
SOUNDBITE — Malware profile
SOUNDBITE was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
PHOREAL — Malware profile
PHOREAL was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
WINDSHIELD — Malware profile
WINDSHIELD was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Sniper Dz: Decade-Long Phishing-as-a-Service Platform
Sniper Dz was a sophisticated phishing-as-a-service (PhaaS) platform active since at least 2015. It offered ready-made phishing kits, hosting infrastructure, and operational…
Joker Dz: Rebrand of Sniper Dz Phishing Platform
Joker Dz was one of the rebranded names used by the Sniper Dz phishing-as-a-service platform. It continued the same malicious activities under…
Storm Dz: Rebrand of Sniper Dz Phishing Platform
Storm Dz was another rebranded identity of the Sniper Dz phishing-as-a-service platform, used to continue credential theft and social engineering attacks.