Research reports
1,224 reports from 387 publishers45 added in the past week
Added Wed 26 Nov 2025
DAMASCENED PEACOCK
Windows, delivered via spear-phishing. DAMASCENED PEACOCK A lightweight, staged downloader targeting Windows, delivered via spear-phishing. Executive summary • DAMASCENED PEACOCK is a lightweight downloader targeting Windows. • The analysed sample was for…
MalwarePhishing
Added Wed 13 Nov 2024
ncsc-mar-pygmy-goat.pdf
Pygmy Goat Network Device Backdoor. Executive summary • Uses LD_PRELOAD to get loaded into /bin/sshd and hook its accept function. • Listens on a raw socket for incoming ICMP packets to trigger a connect back, or uses the hooked accept function to search for…
Malware
Added Wed 17 Apr 2024
NCSC-MAR-Jolly-Jellyfish.pdf
• Jolly Jellyfish downloads and executes shellcode, which is hidden in legitimate bitmap image (BMP) files. • HTTP is used to download image files. • Debug information left in the samples suggest the author refers to this malware as fishmaster. Introduction…
Malware
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.