ANY.RUN Sandbox: Interactive Malware Analysis Environment
ANY.RUN Sandbox is an interactive malware analysis environment that allows security teams to safely observe suspicious files, links, and tools in a…
Tag: malware analysis
Darktrace: Analysis of FDMTP Payloads
Darktrace detailed FDMTP payloads earlier this year, revealing capabilities for managing scheduled tasks, overseeing Registry persistence, and remotely fetching files or commands.
Hunt.io Threat Intelligence
Hunt.io is a security research firm that identified traces of the Flying Eagle Android RAT on 170 servers and analyzed the framework's…
ANY.RUN: Interactive Malware Analysis and Threat Intelligence Platform
ANY.RUN provides interactive sandboxing and threat intelligence solutions. In this investigation, ANY.RUN Sandboxes were used to safely observe suspected DPRK operatives' activity,…
Jamf Threat Labs: macOS Malware Analysis
Jamf Threat Labs is a security research team that disclosed AmnesiaStealer, a macOS malware with a stream_module that uses Chrome DevTools Protocol…
Blackpoint Cyber Uncovers HollowFrame and Matryoshka Malware
Blackpoint Cyber, a cybersecurity company, discovered and analyzed the HollowFrame loader and Matryoshka backdoor used in a spear-phishing campaign against a law…
Zimperium zLabs Research
Zimperium zLabs is the research division of Zimperium that identified and analyzed the Rokarolla Android banking trojan.
Synk: Security Firm Noted Similarities Between Mastra and Axios Attacks
Synk (likely Snyk), a developer security company, analyzed the Mastra campaign and noted strong similarities to the Axios npm compromise, including clean-then-armed…