EDR Goes Blind: ToneShell Protected by a Kernel-Mode Rootkit Malware CyberDefenderDecember 30, 2025December 30, 20256 mins0 A China-linked advanced persistent threat (APT) — associated with Mustang Panda and also tracked as Hive0154 —…continue reading..
Remcos-Style Remote Access Trojan (RAT) Malware CyberDefenderDecember 27, 2025December 27, 20257 mins0 Technical Analysis, Capabilities, Detection, and SOC Response Playbook 1. Introduction Remote Access Trojans (RATs) modeled after Remcos-style…continue reading..
Anubis Malware/Ransomware Malware CyberDefenderDecember 27, 2025December 27, 20256 mins0 Anubis ransomware refers to a family of ransomware and cyber-extortion malware that has appeared in multiple, unrelated…continue reading..
SparkRat Malware: Detection, Hunting, and Response Guide Malware CyberDefenderDecember 27, 2025December 27, 20257 mins0 SparkRat is a cross-platform Remote Access Trojan (RAT) targeting Windows and macOS. It relies heavily on social…continue reading..
Zombie Malware: Inside the World of Dead Walking Machines Malware CyberDefenderDecember 27, 2025December 27, 20256 mins0 Zombie malware refers to malicious software that compromises a host system and covertly places it under the…continue reading..
Living Quietly on the Endpoint: A Deep Dive into AsyncRAT Persistence and Detection Cyber Threat Intelligence AegironDecember 26, 2025December 26, 202511 mins0 Overview AsyncRAT is a Windows-based remote access trojan designed to provide attackers with persistent, covert control of…continue reading..
Golang Malware types and detailed analysis Malware CyberDefenderDecember 26, 2025December 26, 20255 mins0 1. Why Golang Is Popular with Malware Authors Golang has rapidly become a preferred language for modern…continue reading..
Poisoned at the Source: How Evasive Panda Turned ISP DNS Infrastructure into a Silent Malware Delivery System Cyber Threat Intelligence AegironDecember 26, 2025December 26, 20259 mins0 ISP-Level DNS Poisoning & Supply-Chain Espionage Campaign Timeframe: Late 2022 – 2024 (ongoing)Also Known As: Bronze Highland,…continue reading..
X-Worm Malware Malware CyberDefenderDecember 26, 2025December 26, 20257 mins0 X-Worm is a Windows-based Remote Access Trojan (RAT) that has gained popularity in underground forums due to…continue reading..
The Nosy Neighbor: How China’s LongNosedGoblin APT Uses Your IT Admin Tools Against You Cyber Threat Intelligence AegironDecember 25, 2025December 25, 202510 mins0 A Masterclass in Living-Off-The-Land Attack Infrastructure Through Group Policy Abuse 1. Executive Summary For years, defenders have…continue reading..
