Research reports
1,224 reports from 387 publishers45 added in the past week
3 reports, newest added first
Added Thu 14 May
From XLoader to Phantom Stealer: A DHL-Themed multi-stage Infection Chain
I have identified a multi-stage malware campaign delivering Phantom Stealer v3.5.0 via a DHL-themed spam email. Initial access occurs through a ZIP attachment masquerading as an invoice and requiring user execution. The archive drops a signed Java utility…
Infostealers
Added Tue 5 May
Approaching stealers devs : a brief interview with Amadey
To completely understand what’s going on in a market that has been growing in the last years I found mandatory to know which players are dominating it. Always remember that behind every user of the Internet there is another human like you, so if you can be…
Infostealers
Added Fri 1 May
Kimsuky disguised as a Korean company signed with a valid certificate to distribute Troll Stealer…
S2W threat research and intelligence center Talon has hunted for and analyzed a sample of what is believed to be a new malware from the Kimsuky group on VirusTotal. — The malware was found to be distributed from a page that redirects users to a specific site…
State-sponsoredMalwareInfostealers
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.