A digital forensics case study — how a fake “purchase order” almost bypassed Windows’ last line of defense

“” is published by Aditya Singh (Elite Hacker 1337).

Welcome to this new Medium post. In this one we will see how to walk the Windows VAD tree from a kernel R/W primitive, and how to abuse…

At a glance Malware family Atomic Stealer (AMOS) and MacSync infostealers Threat actor Unnamed operator running a Traffic Distribution System (attribution not stated) Target or victims Genuine mac…

Yesterday, I tweeted asking people to share malware samples with me for analysis, for personal reasons.

At a glance Malware family ChainDrop (Shai-Hulud code lineage) Threat actor Unattributed; possible link to TeamPCP (not confirmed) Targets Developer workstations, CI pipelines, cloud environments …

At a glance Malware family Overlord (open-source RAT framework) Threat actor Unattributed (suspected DPRK links noted, not confirmed) Target macOS and Windows users Delivery vector Fake Zoom insta…

Welcome to this new Medium post. In this one we will see Process Parameter Poisoning, a process injection technique published by SensePost…

At a glance Malware family Gunra ransomware (RaaS, Conti-derived) Threat actor Gunra operators and affiliates, also branded Golden Community Targets Government and critical infrastructure across f…

Apple operates a telemetry-based threat detection system that continuously monitors device signals for indicators of compromise. When evidence of a targeted attack surfaces, the company issues dir…