Comrades in Arms? | North Korea Compromises Sanctioned Russian Missile Engineering Company
North Korean threat actors attempt to further missile program by compromising sanctioned Russian defense company with OpenCarrot backdoor.
Read More
JumpCloud Intrusion | Attacker Infrastructure Links Compromise to North Korean APT Activity
North Korean state sponsored APT is behind a new supply chain attack on zero-trust directory platform JumpCloud.
Read More
Cloudy With a Chance of Credentials | AWS-Targeting Cred Stealer Expands to Azure, GCP
Cloud credentials stealing campaign expands to target Azure and Google Cloud via unpatched web app vulnerabilities.
Read More
LABScon Replay | Quiver – Using Cutting Edge ML to Detect Interesting Command Lines for Hunters
Gal Braun and Dean Langsam explore how LLMs can be trained to parse command lines and perform tasks like attribution and detection.
Read More
Automating String Decryption and Other Reverse Engineering Tasks in radare2 With r2pipe
Learn how to drive radare2 with r2pipe for automated binary analysis, string decryption and other common reversing tasks.
Read More
LABScon Replay | Star-Gazing: Using a Full Galaxy of YARA Methods to Pursue an Apex Actor
Greg Lesnewich explores how to to pursue an apex predator using little more than a local instance of YARA and some publicly available open-source tooling.
Read More
Kimsuky Strikes Again | New Social Engineering Campaign Aims to Steal Credentials and Gather Strategic Intelligence
Threat actor targets experts in North Korean affairs with spoofed URLs and weaponized Office documents to steal Google and other credentials.
Read More
Radare2 Power Ups | Delivering Faster macOS Malware Analysis With r2 Customization
Learn how to customize radare2 with user-defined aliases, macros and functions for faster and easier binary diffing and analysis.
Read More
Operation Magalenha | Long-Running Campaign Pursues Portuguese Credentials and PII
A Brazilian threat actor is targeting users of over 30 Portuguese financial institutions with custom backdoors.
Read More
Kimsuky | Ongoing Campaign Using Tailored Reconnaissance Toolkit
North Korean APT group focuses on file reconnaissance and information exfiltration with latest variant of RandomQuery malware.
Read More