Incident Response Report: Maranhão — Trojanized Game Mod to Node.js Infostealer

Platform: CyberDefenders Challenge: Maranhao Category: Endpoint Forensics Difficulty: Easy Tools: DB Browser for SQLite, PECmd, EvtxECmd, Timeline Explorer, Registry Explorer, FTK Imager Achievemen...

Apr 7, 2026 CTF Write-ups, Endpoint Forensics, Incident Response

Threat Intel Report: RaaS Unfold — RansomHub, The Ransomware Empire Built on Abandoned Affiliates

Platform: CyberDefenders Challenge: RaaS Unfold Category: Threat Intelligence / Malware Analysis Difficulty: Hard Tools: VirusTotal, GitHub, Symantec Threat Intelligence, ESET Research, Sophos, Gro...

Apr 5, 2026 CTF Write-ups, Threat Intelligence, Malware Analysis

Threat Intel Report: Red Stealer (RedLine) — Unmasking a Commodity Credential Harvester via VirusTotal, MalwareBazaar & ThreatFox

Platform: CyberDefenders Challenge: Red Stealer Category: Threat Intelligence Difficulty: Easy Tools: VirusTotal, MalwareBazaar, ThreatFox, ANY.RUN Achievement: Proof of Completion 1. Executive S...

Apr 5, 2026 CTF Write-ups, Threat Intelligence

Threat Intel Report: Oski / Stealc Stealer — Analyzing a Credential-Stealing Trojan via ANY.RUN & VirusTotal

Platform: CyberDefenders Challenge: Oski Category: Threat Intelligence Difficulty: Easy Tools: VirusTotal, ANY.RUN, MalConf Achievement: Proof of Completion 1. Executive Summary Incident Type: C...

Apr 5, 2026 CTF Write-ups, Threat Intelligence

Malware Analysis Report: XWorm RAT — Static & Dynamic Analysis of an Obfuscated .NET Remote Access Trojan

Platform: CyberDefenders Challenge: XWorm Category: Malware Analysis Difficulty: Medium Tools: Detect It Easy, CFF Explorer, PEStudio, dnSpy, ProcMon, RegShot, Python3, exiftool, ilspycmd, ANY.RUN ...

Apr 1, 2026 CTF Write-ups, Malware Analysis

Incident Response Report: IIS Server Compromise & AgentTesla Infection

Platform: CyberDefenders Challenge: Lockdown Category: Network Forensics Difficulty: Easy Tools: Wireshark, Volatility 3, FLOSS/Strings, VirusTotal Achievement: Proof of Completion 1. Executive S...

Mar 29, 2026 CTF Write-ups, Incident Response, Network Forensics

Incident Response Report: Amadey Trojan (APT-C-36) — Memory Forensics & Malware Loader Analysis

Platform: CyberDefenders Challenge: Amadey - APT-C-36 Category: Endpoint Forensics / Memory Analysis Difficulty: Easy Tools: Volatility 3, Strings Achievement: Proof of Completion 1. Executive Su...

Mar 29, 2026 CTF Write-ups, Incident Response, Endpoint Forensics

Incident Response Report: XXE Infiltration — XML External Entity Injection, Credential Theft & Web Shell Deployment

Platform: CyberDefenders Challenge: XXE Infiltration Category: Network Forensics / Incident Response Difficulty: Easy Classification: Confidential Tools: Wireshark, Brim Achievement: Proof of Compl...

Mar 22, 2026 CTF Write-ups, Incident Response, Network Forensics

Incident Response Report: Tomcat Takeover — Directory Brute-Force, Credential Cracking & Reverse Shell Persistence

Platform: CyberDefenders Challenge: Tomcat Takeover Category: Network Forensics / Incident Response Difficulty: Easy Classification: Confidential Tools: Wireshark, NetworkMiner, CyberChef Achieveme...

Mar 22, 2026 CTF Write-ups, Incident Response, Network Forensics

Incident Response Report: RetailBreach — Stored XSS, Session Hijacking & Path Traversal on ShopSphere

Platform: CyberDefenders Challenge: RetailBreach Category: Network Forensics / Incident Response Difficulty: Easy Classification: Confidential Tools: Wireshark, NetworkMiner, CyberChef Achievement:...

Mar 22, 2026 CTF Write-ups, Incident Response, Network Forensics

Incident Response Report: Maranhão — Trojanized Game Mod to Node.js Infostealer

Threat Intel Report: RaaS Unfold — RansomHub, The Ransomware Empire Built on Abandoned Affiliates

Threat Intel Report: Red Stealer (RedLine) — Unmasking a Commodity Credential Harvester via VirusTotal, MalwareBazaar & ThreatFox

Threat Intel Report: Oski / Stealc Stealer — Analyzing a Credential-Stealing Trojan via ANY.RUN & VirusTotal

Malware Analysis Report: XWorm RAT — Static & Dynamic Analysis of an Obfuscated .NET Remote Access Trojan

Incident Response Report: IIS Server Compromise & AgentTesla Infection

Incident Response Report: Amadey Trojan (APT-C-36) — Memory Forensics & Malware Loader Analysis

Incident Response Report: XXE Infiltration — XML External Entity Injection, Credential Theft & Web Shell Deployment

Incident Response Report: Tomcat Takeover — Directory Brute-Force, Credential Cracking & Reverse Shell Persistence

Incident Response Report: RetailBreach — Stored XSS, Session Hijacking & Path Traversal on ShopSphere

Trending Tags