UltimaCybr

Yes… I’ve reused/reworded parts of my last post for this one because who doesn’t like to be “efficient” [Read More]

A new ransomware threat has emerged, targeting Linux systems and written in the Rust programming language. [Read More]

The other day I stumbled across a nice summarised article by @herrcore regarding a new variant of Sysrv which caught my attention (especially given my previous post). Now, the article by @herrcore focussed on the Windows variant of the loader which deploys an interesting technique for retrieving the payload in... [Read More]

Introduction [Read More]

Recently, I’ve investigated a couple of coin mining cases which stood out a little differently to the usual ones I see. For one, the miner had been deleted and no config was present on disk. In one instance, a suspicious cronjob was removed and the suspicious random named process killed.... [Read More]