πNew WriteupβοΈ
βββββββββββββββ
πDate: Tue, 27 Jun 2023 04:32:42 GMT
βββββββββββββββ
βοΈTitle: Analyzing Malicious JavaScript
βββββββββββββββ
πLink: https://medium.com/p/aca0d2749949
βββββββββββββββ
Tags: #javascript_malware #giac_grem #cybersecurity #malware_analysis #malware
βββββββββββββββ
πDate: Tue, 27 Jun 2023 04:32:42 GMT
βββββββββββββββ
βοΈTitle: Analyzing Malicious JavaScript
βββββββββββββββ
πLink: https://medium.com/p/aca0d2749949
βββββββββββββββ
Tags: #javascript_malware #giac_grem #cybersecurity #malware_analysis #malware
Medium
Analyzing Malicious JavaScript
Part 4 for GIAC GREM
β€· Title: CAPTCHA to Command: Trustwave Uncovers Stealthy NodeJS Backdoor Campaign
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 01 May 2025 00:30:20 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #fake CAPTCHA #JavaScript malware #KongTuke #NodeJS Backdoor #RAT Malware #Remote Access Trojan #Trustwave SpiderLabs #TryCloudflare Abuse
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 01 May 2025 00:30:20 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #fake CAPTCHA #JavaScript malware #KongTuke #NodeJS Backdoor #RAT Malware #Remote Access Trojan #Trustwave SpiderLabs #TryCloudflare Abuse
Daily CyberSecurity
CAPTCHA to Command: Trustwave Uncovers Stealthy NodeJS Backdoor Campaign
Trustwave uncovers a fake CAPTCHA campaign delivering NodeJS backdoors via PowerShell and TryCloudflare, with SOCKS5 tunneling and RAT capabilities.
β€· Title: SocGholish Reloaded: Darktrace Uncovers Ransomware-Primed Loader Campaign
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 05 May 2025 00:10:31 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #Credential Theft #Darktrace #JavaScript malware #Keitaro TDS #malware loader #NTLM Hashing #ransomware #SCF Exploits #WebDAV
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 05 May 2025 00:10:31 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #Credential Theft #Darktrace #JavaScript malware #Keitaro TDS #malware loader #NTLM Hashing #ransomware #SCF Exploits #WebDAV
Daily CyberSecurity
SocGholish Reloaded: Darktrace Uncovers Ransomware-Primed Loader Campaign
Darktrace uncovers a SocGholish campaign using obfuscated loaders and legacy Windows exploits to harvest NTLM hashes and deliver ransomware payloads.
β€· Title: Phantom v3.5 Alert: New Info-Stealer Disguised as Adobe Update Uses SMTP to Loot Digital Lives
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 19 Dec 2025 00:11:31 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #Adobe Installer #Credential Theft #crypto wallet #info_stealer #JavaScript malware #K7 Security Labs #malware #Phantom Stealer #powershell #SMTP Exfiltration
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 19 Dec 2025 00:11:31 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #Adobe Installer #Credential Theft #crypto wallet #info_stealer #JavaScript malware #K7 Security Labs #malware #Phantom Stealer #powershell #SMTP Exfiltration
Daily CyberSecurity
Phantom v3.5 Alert: New Info-Stealer Disguised as Adobe Update Uses SMTP to Loot Digital Lives
Phantom v3.5 info-stealer targets passwords and crypto via a fake Adobe installer. It uses SMTP to exfiltrate data directly to attackers.
β€· Title: βMagecartβ Strikes Again: Long-Running Web Skimming Campaign Targets Global Payment Networks
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 15 Jan 2026 00:05:40 +0000
ββββββββββββββββββββββββ
β Tags: #Cybercriminals #Credit card skimming #Cyber Crime #e_commerce security #JavaScript malware #Magecart #Online Shopping Security #Silent Push #Stripe Fraud #web skimming #WooCommerce
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 15 Jan 2026 00:05:40 +0000
ββββββββββββββββββββββββ
β Tags: #Cybercriminals #Credit card skimming #Cyber Crime #e_commerce security #JavaScript malware #Magecart #Online Shopping Security #Silent Push #Stripe Fraud #web skimming #WooCommerce
Daily CyberSecurity
βMagecartβ Strikes Again: Long-Running Web Skimming Campaign Targets Global Payment Networks
A vast and persistent web-skimming campaign has been unearthed, targeting the checkout pages of online retailers to silently harvest credit card data from unsuspecting shoppers. Dubbed under the uβ¦
β€· Title: Weaponized Browsers: How the βDRILLAPPβ Backdoor Turns Microsoft Edge into an Espionage Tool
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 17 Mar 2026 08:03:39 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #Browser Exploitation #cyber_espionage #cybersecurity #DRILLAPP Backdoor #infosec #JavaScript malware #Lab52 #LAUNDRY BEAR #microsoft edge #Ukraine Cyber Attacks
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 17 Mar 2026 08:03:39 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #Browser Exploitation #cyber_espionage #cybersecurity #DRILLAPP Backdoor #infosec #JavaScript malware #Lab52 #LAUNDRY BEAR #microsoft edge #Ukraine Cyber Attacks
Daily CyberSecurity
Weaponized Browsers: How the 'DRILLAPP' Backdoor Turns Microsoft Edge into an Espionage Tool
LAB52 uncovers the DRILLAPP backdoor, a novel espionage campaign targeting Ukraine that weaponizes Microsoft Edge for screen recording and surveillance.