Threat actors are increasingly acquiring expired domains—known as "dropcatch domains"—to inherit their reputation and traffic, redirecting victims to scams and malware. According…
Quasar RAT is a remote access trojan that has been observed communicating with Sable Squirrel's infrastructure. It was found on domains like…
A suspected China-nexus threat activity cluster, codenamed Operation DragonReturn by Seqrite Labs, has been targeting Indian taxpayers, tax professionals, and corporate finance…
SADBRIDGE is a custom malware loader that uses PoolParty Variant 7 to inject shellcode into explorer.exe. It is designed to deploy GOSAR,…
GOSAR is a Golang-based remote access trojan that reimplements Quasar RAT. It is deployed by the SADBRIDGE loader and has been used…