Spamvertized Github Powershell Malicious Software Executing Campaign Spotted in the Wild

Dear blog readers,I’ve recently intercepted a currently circulating spamvertised campaign enticing users into interacting with a Powershell script ultimately tricking them into downloading and executing malicious software on their hosts.Upon execution … Continue reading Spamvertized Github Powershell Malicious Software Executing Campaign Spotted in the Wild

Posted in Uncategorized

An OSINT Profile of U.S Secret Service’s Most Wanted Cybercriminal Danil Potekhin

In this analysis we’ll take a look at the Internet connected infrastructure of U.S Secret Service’s most wanted cybercriminal with a $10M reward Danil Potekhin using a variety of tools in terms of connecting the dots using current real time and histori… Continue reading An OSINT Profile of U.S Secret Service’s Most Wanted Cybercriminal Danil Potekhin

Posted in Uncategorized

Dynamic DNS Service Providers for APT Command and Control (C&C) – An Analysis

Dear blog readers,The following is a compilation of dynamic DNS providers in specific ones used by APTs and various other targeted campaign obtained using public sources. Sample dynamic DNS service provider domains known to have been involved in variou… Continue reading Dynamic DNS Service Providers for APT Command and Control (C&C) – An Analysis

Posted in Uncategorized

The Intellexa Commercial Spyware Consortium, The Predator Spyware, NSO Group and Bulgaria’s Circles Commercial Spyware Vendor

Dear blog readers,I’ve decided to continue my post on Bulgaria’s Circles commercial spyware vendor which I profiled here in depth which appears to be heavily affiliated with the Intellexa Commercial Spyware Consortium, the Predator Spyware and NSO Grou… Continue reading The Intellexa Commercial Spyware Consortium, The Predator Spyware, NSO Group and Bulgaria’s Circles Commercial Spyware Vendor

Posted in Uncategorized