SLEEPWALKER Backdoor: A Stealthy Windows Implant Triggered by a Single Network Packet
A newly documented Windows backdoor named SLEEPWALKER has been detailed by independent malware researcher Dominik Reichel. The implant remains dormant in memory…
Tag: malware analysis
KPMG Israel: Explaining Early Bird APC Injection
KPMG Israel is a professional services firm that provided an explainer on the Early Bird APC Injection technique used by PINHOLE RAT.…
ANY.RUN Sandbox: Interactive Malware Analysis Environment
ANY.RUN Sandbox is an interactive malware analysis environment that allows security teams to safely observe suspicious files, links, and tools in a…
Darktrace: Analysis of FDMTP Payloads
Darktrace detailed FDMTP payloads earlier this year, revealing capabilities for managing scheduled tasks, overseeing Registry persistence, and remotely fetching files or commands.
ANY.RUN: Interactive Malware Analysis and Threat Intelligence
ANY.RUN is a cybersecurity company providing an interactive sandbox for malware analysis and threat intelligence feeds. Its research uncovered the Mirage2FA campaign,…
Jamf Threat Labs: macOS Malware Analysis
Jamf Threat Labs is a security research team that disclosed AmnesiaStealer, a macOS malware with a stream_module that uses Chrome DevTools Protocol…
Blackpoint Cyber Uncovers HollowFrame and Matryoshka Malware
Blackpoint Cyber, a cybersecurity company, discovered and analyzed the HollowFrame loader and Matryoshka backdoor used in a spear-phishing campaign against a law…
Synk: Security Firm Noted Similarities Between Mastra and Axios Attacks
Synk (likely Snyk), a developer security company, analyzed the Mastra campaign and noted strong similarities to the Axios npm compromise, including clean-then-armed…