Archives
- 21 Jun Incident Investigation Report: CursorJack — From Malicious MCP to Multi-Region Cryptojacking & Blockchain OSINT
- 21 Jun Incident Investigation Report: ClickFix - VodkaStealer — From Social Engineering to Full Network Compromise
- 21 Jun Threat Intelligence Analysis: IcedID — Tracking a Macro-Enabled Document Delivery Chain
- 21 Jun Incident Investigation Report: AWSRaid — Compromised IAM Credentials & S3 Data Exfiltration
- 15 Jun Memory Forensics Report: RedLine — Extracting Stealer Artifacts from RAM
- 15 Jun Malware Analysis Report: Ramnit — Tracking a Malicious ChromeSetup Downloader
- 13 Jun Incident Response Report: PsExec Hunt — Lateral Movement via SMB & PsExec in a Corporate Network
- 13 Jun Digital Forensics Report: The Crime — Android Mobile Device Forensics of a Homicide Victim
- 21 Apr Incident Response Report: JetBrains TeamCity — Auth Bypass, Web Shell & Credential Tampering
- 20 Apr Incident Response Report: LFI Escalation — From Directory Traversal to Full System Compromise
- 18 Apr Incident Response Report: RediShell — From Jenkins RCE to Container Escape & Kinsing Miner
- 18 Apr Threat Intelligence Analysis: Lespion — OSINT Investigation of an Insider Threat
- 18 Apr Threat Intelligence Analysis: Yellow RAT — Hunting the Jupyter / Yellow Cockatoo Infostealer
- 17 Apr Incident Response Report: PoisonedCredentials — LLMNR/NBT-NS Poisoning & SMB Relay
- 12 Apr Incident Investigation Report: Poisoned PyTorch — Supply-Chain Compromise to Lynx Ransomware
- 08 Apr Incident Investigation Report: XLMRat — Tracing a Multi-Stage AsyncRAT Delivery Chain
- 08 Apr Incident Investigation Report: GrabThePhisher — Dismantling a DeFi Phishing Kit
- 07 Apr Incident Response Report: Maranhão — Trojanized Game Mod to Node.js Infostealer
- 05 Apr Threat Intel Report: RaaS Unfold — RansomHub, The Ransomware Empire Built on Abandoned Affiliates
- 05 Apr Threat Intel Report: Red Stealer (RedLine) — Unmasking a Commodity Credential Harvester via VirusTotal, MalwareBazaar & ThreatFox
- 05 Apr Threat Intel Report: Oski / Stealc Stealer — Analyzing a Credential-Stealing Trojan via ANY.RUN & VirusTotal
- 01 Apr Malware Analysis Report: XWorm RAT — Static & Dynamic Analysis of an Obfuscated .NET Remote Access Trojan
- 29 Mar Incident Response Report: IIS Server Compromise & AgentTesla Infection
- 29 Mar Incident Response Report: Amadey Trojan (APT-C-36) — Memory Forensics & Malware Loader Analysis
- 22 Mar Incident Response Report: XXE Infiltration — XML External Entity Injection, Credential Theft & Web Shell Deployment
- 22 Mar Incident Response Report: Tomcat Takeover — Directory Brute-Force, Credential Cracking & Reverse Shell Persistence
- 22 Mar Incident Response Report: RetailBreach — Stored XSS, Session Hijacking & Path Traversal on ShopSphere
- 21 Mar Incident Response Report: Web Investigation — SQL Injection, Credential Theft & Web Shell Deployment
- 27 Feb Incident Response Report: WebStrike — Server Compromise & Network Forensics Investigation
- 18 Jan Threat Intelligence Analysis: PhishStrike — Email Phishing & Multi-Stage Malware Investigation
- 16 Jan Incident Investigation Report: Operation 'BRabbit' — Bad Rabbit Ransomware Threat Intelligence