Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Toy Ghouls backdoors use MQTT and Matrix C2
Kaspersky GERT found new Toy Ghouls backdoors using HiveMQ MQTT and Element messenger for command-and-control.
HydraDragonAntivirus v2 Release 9 Adds AI and XDR
HydraDragonAntivirus v2 release 9 integrates open-source XDR, ClamAV, YARA-X, and AI for enhanced Windows malware detection.
JSC Deobfuscator Toolkit Targets V8 Bytecode
A new static deobfuscation toolkit analyzes compiled V8 JavaScript bytecode, focusing on JSCeal payloads with pattern filters and control-flow unflatt
View8 Decompiles V8 Bytecode for Malware Analysis
View8 is a tool that decompiles serialized V8 bytecode (JSC files) into readable JavaScript-like code, aiding malware analysis.
BraZetsu Malware Turns Hacked Windows PCs into Marketplace
Researchers exposed BraZetsu, a Python-based Windows malware framework that helps initial access brokers sell compromised hosts on an underground mark
Infostealer Logs Can Bypass MFA: Act in First Hour
Credentials from infostealer logs may include active sessions, enabling MFA bypass. Respond within the first hour to prevent account takeover.
BraZetsu uses AI to price and sell compromised Windows hosts
BraZetsu, a Python-based framework, uses AI to profile and price compromised Windows hosts for sale on Exilware's underground marketplace, targeting B
Node.js Runtime Abused to Deliver Malware in Targeted
Threat actors exploit trusted Node.js runtime to deploy malicious payloads, targeting government, tech, and hotels since February 2026.
Shai-Hulud Infostealer Expands to 469 Credential Locations
GitGuardian found Shai-Hulud infostealer worm now scans 469 locations for credentials, up from 189, targeting dev, CI/CD, cloud, and AI configs.
StreamRat Android malware spreads via Meta and TikTok ads
A malicious ad campaign for a fake TV-streaming service hit about 570,000 Meta users, delivering StreamRat Android malware.
Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone
The iPhone belonging to a member of Serbia's student protest movement was infected with NSO Group's Pegasus spyware, according to new findings from the Citizen Lab in collaboration with the SHARE Foundation. "Our analysis confirmed that an iMessage zero-click exploit was used to infect the device w
mw-collector Malware Tool Added to PyPI
A new CLI tool, mw-collector, is now on PyPI for collecting malware samples from public repositories.