SpyPress: JavaScript Malware Used in Operation RoundPress
SpyPress is an obfuscated JavaScript-based malware used by TA458 in Operation RoundPress. It targets webmail platforms including Roundcube, Zimbra, Kerio, SOGo, and…
Category: Malware
Malware families, payloads, loaders, ransomware and related tooling.
LONEPAGE — Malware profile
LONEPAGE was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
MATCHBOIL — Malware profile
MATCHBOIL was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
MATCHWOK — Malware profile
MATCHWOK was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
DRAGSTARE — Malware profile
DRAGSTARE was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
BURNYBEAR: Loader Used in UAC-0099 Attacks
BURNYBEAR is a loader used by UAC-0099 to deliver MATCHBOIL.V2. It is executed as RemoteLibUpdater.exe and can exhaust system resources if launched…
MATCHBOIL.V2: C#-Based Loader Delivered via Fake Notepad++ Plugin
MATCHBOIL.V2 is a modified version of the MATCHBOIL malware, a C#-based loader capable of delivering secondary payloads. It was deployed in attacks…
ZimReaper: JavaScript Malware Targeting Zimbra Mail Servers
ZimReaper is a malicious JavaScript delivered via a half-click exploit (CVE-2025-66376) by the Laundry Bear threat actor. It harvests email communications and…
TriBack Loader: New Windows Loader Used by JadeProx
TriBack Loader is a previously undocumented Windows loader used by the JadeProx operation. It employs DLL sideloading with four infection chains, using…
AdaptixC2: Open-Source Post-Exploitation Framework
AdaptixC2 is an open-source post-exploitation framework delivered by two variants of the TriBack Loader in the JadeProx operation.