Executive Summary Adversaries have been observed abusing legitimate
adversary simulation software in their attacks to stay under the radar
and evade detection. One such example sees hacking groups and ransomware
operations are moving away from Cobalt...
Executive Summary DarkTortilla is a complex and highly configurable
.NET-based crypter that has possibly been active since at least August
2015. It typically delivers popular information stealers and remote
access trojans (RATs) such as AgentTesla, A...
Executive Summary BlackCat, also known as ALPHV or Noberus, is a
ransomware family that is deployed as part of Ransomware as a Service
(RaaS) operations. BlackCat is written in the Rust programming language
and supports execution on Windows, Linux-ba...
What is Agent Tesla? Agent Tesla is a spyware Trojan written for the
.NET framework that has been observed since at least 2014. The malware
has many features like key logging, clipboard capture, screen capturing
and extracting stored passwords from m...
What is BazarLoader? Bazar malware infections are specifically targeting
professional services, healthcare, manufacturing, IT, logistics, and
travel companies across the US and Europe. BazarLoader (aka
BazarBackdoor) is a Windows-based malware spread...
