Overview

All Articles

Writing Signatures for .NET Malware

08/04/2025

100 Days of YARA: Writing Signatures for .NET Malware

Vidar Stealer: Revealing A New Deception Strategy

07/04/2025

Vidar Stealer: Revealing A New Deception Strategy

Smoked out - Emmenhtal spreads SmokeLoader malware

31/03/2025

Smoked out - Emmenhtal spreads SmokeLoader malware

Unboxing Anubis: Exploring the Stealthy Tactics of FIN7's Latest Backdoor

20/03/2025

Unboxing Anubis: Exploring the Stealthy Tactics of FIN7's Latest Backdoor

Booking a Threat: Inside LummaStealer's Fake reCAPTCHA

03/03/2025

Booking a Threat: Inside LummaStealer's Fake reCAPTCHA

Malware from fake recruiters

10/02/2025

Malware from fake recruiters

An honest mistake - and a cautionary tale

16/01/2025

An honest mistake - and a cautionary tale

New I2PRAT communicates via anonymous peer-to-peer network

16/12/2024

New I2PRAT communicates via anonymous peer-to-peer network

A Kernel Land Rootkit Loader for FK_Undead

10/12/2024

Malware Analysis: A Kernel Land Rootkit Loader for FK_Undead

Unveiling AsyncRAT

10/10/2024

Malware by the (Bit)Bucket: Unveiling AsyncRAT

Exploring GenAI in Cybersecurity: Gemini for Malware Analysis

07/10/2024

Exploring GenAI in Cybersecurity: Gemini for Malware Analysis

1
Writing Signatures for .NET Malware

2
Unboxing Anubis: Exploring the Stealthy Tactics of FIN7's Latest Backdoor

3
Smoked out - Emmenhtal spreads SmokeLoader malware

4
Unveiling AsyncRAT

5
Exploring GenAI in Cybersecurity: Gemini for Malware Analysis

6
BBTok Targeting Brazil: Deobfuscating the .NET Loader with dnlib and PowerShell

7
A Kernel Land Rootkit Loader for FK_Undead

Our Authors

Karsten Hahn

Karsten Hahn

Principal Malware Researcher

Tim Berghoff

Tim Berghoff

Security Evangelist