Overview

All Articles

Writing Signatures for .NET Malware

04/08/2025

100 Days of YARA: Writing Signatures for .NET Malware

Vidar Stealer: Revealing A New Deception Strategy

04/07/2025

Vidar Stealer: Revealing A New Deception Strategy

Smoked out - Emmenhtal spreads SmokeLoader malware

03/31/2025

Smoked out - Emmenhtal spreads SmokeLoader malware

Unboxing Anubis: Exploring the Stealthy Tactics of FIN7's Latest Backdoor

03/20/2025

Unboxing Anubis: Exploring the Stealthy Tactics of FIN7's Latest Backdoor

Booking a Threat: Inside LummaStealer's Fake reCAPTCHA

03/03/2025

Booking a Threat: Inside LummaStealer's Fake reCAPTCHA

Malware from fake recruiters

02/10/2025

Malware from fake recruiters

An honest mistake - and a cautionary tale

01/16/2025

An honest mistake - and a cautionary tale

New I2PRAT communicates via anonymous peer-to-peer network

12/16/2024

New I2PRAT communicates via anonymous peer-to-peer network

A Kernel Land Rootkit Loader for FK_Undead

12/10/2024

Malware Analysis: A Kernel Land Rootkit Loader for FK_Undead

Unveiling AsyncRAT

10/10/2024

Malware by the (Bit)Bucket: Unveiling AsyncRAT

Exploring GenAI in Cybersecurity: Gemini for Malware Analysis

10/07/2024

Exploring GenAI in Cybersecurity: Gemini for Malware Analysis

1
Writing Signatures for .NET Malware

2
Unboxing Anubis: Exploring the Stealthy Tactics of FIN7's Latest Backdoor

3
Smoked out - Emmenhtal spreads SmokeLoader malware

4
Unveiling AsyncRAT

5
Exploring GenAI in Cybersecurity: Gemini for Malware Analysis

6
BBTok Targeting Brazil: Deobfuscating the .NET Loader with dnlib and PowerShell

7
A Kernel Land Rootkit Loader for FK_Undead

Our Authors

Karsten Hahn

Karsten Hahn

Principal Malware Researcher

Tim Berghoff

Tim Berghoff

Security Evangelist