#Malware
NetamLoader Targets Government Windows: The Update Folder Is Now a Hunting Surface
NetamLoader Targets Government Windows: The Update Folder Is Now a Hunting Surface Kaspersky’s discovery of NetamLoader shows how a highly tailored intrusion ca...
Lucas Oliveira
Research
GMO Onamae Cloud Breach: When a Hosted Desktop Becomes a Trading-Risk Control Plane
GMO Onamae Cloud Breach: When a Hosted Desktop Becomes a Trading-Risk Control Plane GMO Internet’s Onamae.com Desktop Cloud incident shows how a compromise of a...
Lucas Oliveira
Research
PoeLLM Canto Incognito: The Botnet Hiding C2 in a GitHub Poem
PoeLLM Canto Incognito: The Botnet Hiding C2 in a GitHub Poem Executive Summary Lumen's Black Lotus Labs has tracked Canto Incognito, a financially motivated ca...
Lucas Oliveira
Research
North Korea's Contagious Interview campaign turns job tests into malware delivery
North Korea's Contagious Interview campaign turns job tests into malware delivery Executive Summary A new joint advisory from Japan, the United States, Australi...
Lucas Oliveira
Research
Operation RapidRust shows APT36 evolving beyond simple phishing lures
Operation RapidRust shows APT36 evolving beyond simple phishing lures APT36, also tracked as Transparent Tribe, has a new campaign worth more than a passing mal...
Lucas Oliveira
Research
CHOSEN BRICK: Iranian Spyware Targets Dissidents
CHOSEN BRICK: Iranian Spyware Targets Dissidents | 2026 Since September 15, 2026, a joint advisory from the UK's National Cyber Security Centre, the FBI, and th...
Lucas Oliveira
Research
Malicious Browser Extensions Target Crypto Traders
Malicious Browser Extensions Target Crypto Traders | 2026 Executive Summary Socket Threat Research has disclosed a cross-browser extension operation targeting c...
Lucas Oliveira
Research
Counterfeit Installer Campaign Shows Why Download Telemetry Matters
Counterfeit Installer Campaign Shows Why Download Telemetry Matters Microsoft's latest campaign analysis is a useful reminder that initial access does not alway...
Lucas Oliveira
Research
7-Zip CVE-2026-14266 turns archive handling into an endpoint patch priority
7-Zip CVE-2026-14266 turns archive handling into an endpoint patch priority The latest 7-Zip security disclosure is not the kind of vulnerability that lets an a...
Lucas Oliveira
Research
SimpleHelp CVE-2026-48558 exploitation turns RMM into a credential-theft path
SimpleHelp CVE-2026-48558 exploitation turns RMM into a credential-theft path SimpleHelp has moved from patched vulnerability to active intrusion path. Attacker...
Lucas Oliveira
Research
Kazuar’s redesign turns a familiar backdoor into a harder-to-hunt botnet
Kazuar’s redesign turns a familiar backdoor into a harder-to-hunt botnet Microsoft’s latest research on Kazuar matters because it reframes the malware from a we...
Lucas Oliveira
Research
TCLBANKER turns WhatsApp and Outlook into trusted malware delivery channels
TCLBANKER turns WhatsApp and Outlook into trusted malware delivery channels The most important detail in Elastic's new TCLBANKER research is not just that a Bra...
Lucas Oliveira
Research