NetAskari Independent Research
NetAskari is an independent security researcher who collaborated with Hunt.io to trace Flying Eagle control panels and certificates to 170 internet servers.
Tag: threat intelligence
Flying Eagle Android RAT Found on 170 Servers as Source Code Circulates
Security researchers have identified traces of the Flying Eagle Android remote access trojan (RAT) framework on 170 internet servers, as its source…
Nozomi Networks: OT and IoT Security Provider
Nozomi Networks is a cybersecurity company specializing in operational technology (OT) and Internet of Things (IoT) security. Their Nozomi Networks Labs discovered…
URLhaus: Malware URL Tracking Service
URLhaus is a project that tracks malware URLs. It independently recorded 17 malware URLs associated with the Tengu botnet's C2 server, including…
Critical Arista VeloCloud Orchestrator Command Injection Flaw Exploited in the Wild
A maximum-severity command injection vulnerability in on-premises versions of Arista VeloCloud Orchestrator (VCO) is being actively exploited. Tracked as CVE-2026-16812 with a…
Dysphoria IoT Botnet Adopts Blockchain C2 and Victim Relays After JackSkid Takedown
The Dysphoria IoT botnet, tracked by CNCERT and XLab (Qi'anxin), has evolved to use blockchain-based name services and infected-device relays following a…
XLab: Threat Intelligence Lab of Qi’anxin
XLab is the threat-intelligence lab of Chinese cybersecurity firm Qi'anxin. It published the July 25 analysis of Dysphoria's evolution, including ENS/SNS resolution…
Cruciferra Crypter Uses BYOVD and Process Ghosting to Evade Windows Malware Detection
The China-linked cybercrime group behind tax-themed phishing lures targeting Indian taxpayers and corporate finance teams has deployed a sophisticated crypter service called…
TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments
Cybersecurity researchers at Zscaler ThreatLabz have uncovered a malicious campaign targeting government entities in the Middle East, attributed to an East Asian…
Confiant Discovers SourTrade Malvertising Campaign
Confiant, a cybersecurity firm, detailed the SourTrade malvertising campaign on July 23, 2026. The campaign uses victims' browsers to assemble malware executables…