GootLoader malware is abusing malformed ZIP archives that bypass common tools like WinRAR & deliver JavaScript payloads via ...

The Gootloader malware, typically used for initial access, is now using a malformed ZIP archive designed to evade detection ...

Securonix has published a blog giving details of a new multi-stage Windows malware campaign it calls SHADOW#REACTOR. Its goal is to deploy the Remcos RAT ...

Attackers use a sophisticated delivery mechanism for RAT deployment, a clever way to bypass defensive tools and rely on the ...

SHADOW#REACTOR is a malware campaign using VBS, PowerShell, and MSBuild to stealthily deploy Remcos RAT with persistent ...

Samba-VirusFilter has been merged to Samba upsteam source. Please use vfs_virusfilter(8) bundled in Samba 4.8.0 or later. This is a set of various Samba VFS modules to scan and filter virus files on ...

Wscript.exe is an essential Windows file that is responsible for running VBScript or JScript scripts. The file name is often used by cyber attackers to disguise harmful viruses and worms to evade ...

One of the first things that one learns while learning to use a computer is an application called notepad. Almost everyone knows what notepad is, and despite being a simple looking and functioning ...

Cubesat Space Protocol (CSP) is a small protocol stack written in C. CSP is designed to ease communication between distributed embedded systems in smaller networks, such as Cubesats. The design ...

The most advanced cyberattackers try to look like your administrators, abusing legitimate credentials, using legitimate system binaries or tools that are natively utilized in the victim's environment.