Research reports
1,224 reports from 387 publishers45 added in the past week
2 reports, newest added first
Added Sun 25 Oct
PlugX: Bad guy disguises as an msi file
Use msitool to extract msidump -s -t mal.msi . In File.idt , we can see that there are 3 embed file. These files are extracted to %LOCALAPPDATA\kjnBsLsJo\ Upon running, the program opens an pdf file called Meeting Invitation.pdf 2. DLL Side-loading technique…
Added Thu 23 Jul
Beyond the Archive: CVE-2025-8088 Stealer Targeting Ukraine
This report details a targeted cyber-espionage campaign conducted by the Russia-aligned threat actor group APT SHADOW-EARTH-066 (also tracked by CERT-UA as UAC-0226), delivering an updated variant of the GIFTEDCROOK information stealer against Ukrainian…
State-sponsoredInfostealersVulnerabilities
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.