Balonx Sistema — Malware profile
Balonx Sistema was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs,…
Category: Malware
Malware families, payloads, loaders, ransomware and related tooling.
SLEEPWALKER Backdoor: A Stealthy Windows Implant Triggered by a Single Network Packet
A newly documented Windows backdoor named SLEEPWALKER has been detailed by independent malware researcher Dominik Reichel. The implant remains dormant in memory…
SLEEPWALKER Backdoor: Technical Analysis
SLEEPWALKER is a Windows backdoor that remains dormant until receiving a crafted network packet. It executes commands in a custom 23-instruction bytecode…
BPFDoor: Passive Backdoor Used by Red Menshen
BPFDoor is a passive backdoor used by the Red Menshen group in telecom networks. It waits for specific packets to activate and…
PINHOLE RAT: Advanced Malware Using High-Reputation Platforms as DDRs
PINHOLE is an advanced remote access trojan that abuses FTP banners and uses high-reputation platforms like Pinterest and SurveyMonkey as dead drop…
E4del and PINHOLE RATs Abuse FTP Banners as Dead Drop Resolvers
Cybersecurity researchers have uncovered a novel campaign that abuses FTP banners as dead drop resolvers (DDRs) to deliver two previously unreported remote…
E4del RAT: Node.js-Based Malware Abusing FTP Banners
E4del is a Node.js-based remote access trojan delivered via FTP banner dead drop resolvers. It is embedded in a digitally signed Electron…
Mirage2FA: Phishing-as-a-Service Toolkit Bypassing MFA
Mirage2FA is a commercial phishing-as-a-service toolkit that targets Microsoft 365 accounts by abusing legitimate login flows and bypassing two-factor authentication. Active from…
Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning
Cybersecurity researchers have uncovered an ongoing campaign distributing the Weedhack malware to gamers through fake Minecraft clients and SEO poisoning. McAfee Labs…
Weedhack Malware: Fake Minecraft Clients and SEO Poisoning
Weedhack is a malware family distributed via fake Minecraft clients and SEO poisoning. It uses multi-stage JAR payloads to collect system information,…