PyArmor: Obfuscation Tool Used by TWINLOOT
TWINLOOT is hardened with PyArmor, a Python obfuscation tool, to evade detection and analysis.
Tag: obfuscation
TELESHIM: Telegram-Based C2 Backdoor
TELESHIM is a 32-bit Windows backdoor that abuses the Telegram API for command-and-control communication. It uses DLL side-loading via RegSchdTask.exe and AsTaskSched.dll,…
Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery
Security researcher Bert-Jan Pals analyzed roughly 3,000 live ClickFix payloads and presented findings at OrangeCon in early June, publishing details on June…