Research reports
1,224 reports from 387 publishers45 added in the past week
2 reports, newest added first
Added Tue 28 Jul
ClickFix × HijackLoader: Dissecting a Live Stealer Campaign - Part 2
In Part 1, I walked through the full delivery chain, from the ClickFix lure through the MSI package, both loader stages, and into the ti64 orchestrator. By the end, the syscall table was built, ntdll was unhooked, and TinyCallProxy64 was loaded into the…
Infostealers
ClickFix × HijackLoader: Dissecting a Live Stealer Campaign - Part 1
While browsing, I randomly came across an ad telling me that human verification was required. Curious, I followed it. The site it led to was simple. Just a lonely button, asking me to click it to prove I was human. Once I did, I was given instructions: press…
Infostealers
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.