Malware

Byakugan is a node.js-based malware packed into its executable by pkg. In addition to the main script, there are several...

RotBot is a variant of the QuasarRAT client that the CoralRaider threat actor has customized and compiled for the January...

The StrelaStealer malware is an evolving threat designed to steal email credentials by targeting popular email clients. This malware first...

Described as a simple yet effective C++-based malware, Unapimon comes with advanced features focused on thwarting detection mechanisms.

Agenda ransomware, spotted in August 2022, is written in Go and has been used primarily to target healthcare and education...

WikiLoader consists of several components, including a loader, injector, downloader, and backdoor, with communication to C2 servers.

Mispadu is an ambitious Latin American banking trojan that utilizes McDonald’s malvertising and extends its attack surface to web browsers.

First identified in 2020, Sysrv is a botnet that uses a Golang worm to infect devices and deploy cryptominers, propagates...

Smoke Loader is a backdoor malware targeting systems running Microsoft Windows. It is notorious for its use of deception and...