ROMULUS platform uses ClickFix traps, PowerShell scripts and fake installers to deliver malware and infect Windows systems.

Creating Software and Distributing It Correctly Are Different ThingsYou want to have other people use the software you ...

On Windows 11, which lacks WMIC (Windows Management Instrumentation Command-line; wmic.exe), running a standard batch file that creates a date string from the output of 'wmic os get LocalDateTime' ...

Flax Typhoon Ran on 1,300 Scripts and a 12-Year-Old Bug Nobody Patched The Cyber Resilience Brief: Integrity Tech and ...

Kimsuky exploits GitHub and trusted code platforms to deliver malware and spy on Ukrainian diplomacy, security and policy ...

Delivered via phishing, the malware provides reconnaissance, remote execution, and data exfiltration capabilities.

Hey folks, Vladan here from ESX Virtualization. If you’ve been reading the blog for a while you already know I’m always on ...

When a cyber incident occurs, one of the first challenges is understanding what happened, which systems were involved, and what traces were left behind. In this context, Velociraptor is an open-source ...

DarkBlinders hackers are using a fake video meeting application and GitHub repositories to conduct cyberespionage against ...

Silent Lynx, a Kazakhstan-linked hacking group tracked as UAT-6275 and TAG-193, exploited CVE-2025-8088, a WinRAR ...

Hackers are using GitHub-hosted PowerShell scripts and a WinRAR vulnerability to target government organizations across the Commonwealth ...

I combined a light script with Robocopy, and it now watches essential folders and mirrors changes.