At a glance Malware family ChainDrop (Shai-Hulud code lineage) Threat actor Unattributed; possible link to TeamPCP (not confirmed) Targets Developer workstations, CI pipelines, cloud environments …

At a glance Malware family Overlord (open-source RAT framework) Threat actor Unattributed (suspected DPRK links noted, not confirmed) Target macOS and Windows users Delivery vector Fake Zoom insta…

Welcome to this new Medium post. In this one we will see Process Parameter Poisoning, a process injection technique published by SensePost…

At a glance Malware family Gunra ransomware (RaaS, Conti-derived) Threat actor Gunra operators and affiliates, also branded Golden Community Targets Government and critical infrastructure across f…

Apple operates a telemetry-based threat detection system that continuously monitors device signals for indicators of compromise. When evidence of a targeted attack surfaces, the company issues dir…

A single phone call with a fraudster can now result, within the same session, in a loan taken out in the victim’s name and unauthorized purchases charged to their bank card. Researchers at G…

MalOps.io Challenge Write-up Tracing persistence, encrypted payloads, shellcode execution, security bypasses, and C2 infrastructure

Subtitle: The terrifying moment I realized cybersecurity isn't about size it's about opportunity

I recently stumbled upon a new phishing technique and almost fell for it 😁

Steal Google / Bank Credentials with a Fake System Update