Executive Summary DarkTortilla is a complex and highly configurable
.NET-based crypter that has possibly been active since at least August
2015. It typically delivers popular information stealers and remote
access trojans (RATs) such as AgentTesla, A...
Executive Summary BlackCat, also known as ALPHV or Noberus, is a
ransomware family that is deployed as part of Ransomware as a Service
(RaaS) operations. BlackCat is written in the Rust programming language
and supports execution on Windows, Linux-ba...
What is Agent Tesla? Agent Tesla is a spyware Trojan written for the
.NET framework that has been observed since at least 2014. The malware
has many features like key logging, clipboard capture, screen capturing
and extracting stored passwords from m...
What is BazarLoader? Bazar malware infections are specifically targeting
professional services, healthcare, manufacturing, IT, logistics, and
travel companies across the US and Europe. BazarLoader (aka
BazarBackdoor) is a Windows-based malware spread...
Introduction Lionel Gilles, a French-based Offensive Computer Security
researcher at Sogeti, an IT services company based in Paris, France
recently published a PoC tool called PetitPotam, which exploits the
MS-EFSRPC (Encrypting File Services Remote ...
