Research reports
1,224 reports from 387 publishers45 added in the past week
3 reports, newest added first
Added Sun 25 Oct
Trust the Tunnel, Get the Trojan: Silver Fox Delivers Atlas RAT via Weaponized VPN Installers
Overview of the Silver Fox AtlasCross campaign kill chain, from typosquatted lure domains through the triple-nested Setup Factory installer to fileless AtlasCross RAT deployment. Executive Summary A multi-stage remote access trojan campaign is actively…
MalwareSupply chain
Added Thu 8 Oct
FLEXRAT – ChilloutVR Lures, Shared Secrets, and an OPSEC Hangover
Hexastrike uncovered an undocumented commodity stealer and remote access toolset, which we track as FLEXRAT, distributed through counterfeit game-modification websites. The most prominent lure infrastructure impersonates the ecosystem surrounding ChilloutVR,…
Added Wed 6 May
Cloned, Loaded, and Stolen: How 109 Fake GitHub Repositories Delivered SmartLoader and StealC
We identified 109 malicious GitHub repositories across 103 accounts that impersonate legitimate projects and redirect users to embedded ZIP files containing a LuaJIT-based SmartLoader stage. The campaign appears to be operated by a single threat actor or…
MalwareInfostealers
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.