Team46 and TaxOff: two sides of the same coin
Team46 and TaxOff: Two Sides of the Same Coin😑 In March 2025, specialists from the TI department of the Positive Technologies Expert Security Center (PT Expert…
[ FEED // CHRONO // 267 ITEMS ]
ALL MATERIALS
APT group Cloud Atlas attacks Russian defense industry enterprises
APT group Cloud Atlas attacks Russian defense industry enterprises 🌎 At the end of last year and the beginning of this year, a cyber intelligence group discover…
Really subtle interaction
Truly subtle interaction 🕊 During reverse engineering of the protocol of one of the Brazilian banking trojans, the use of an interesting network framework was d…
Big Browser is watching you
Big Browser is watching you 👹 The cyber intelligence group has recorded a new campaign using an updated stealer Unicorn, which began in mid-February and continu…
In Puma's footsteps: how to detect a rootkit through its own interface
🐾 Following in Puma's Footsteps: How to Detect a Rootkit Through Its Own Interface Today, our review covers a technically interesting and multifunctional Linux…
Did you know that malicious people don't like LNK file parsers?
Did you know that malicious actors don't like LNK file parsers? 👿 In March we wrote about XDSpy attacks on Russian organizations. The LNK files used in this att…
Looking for the necessary system calls
@The malware got into the system... @The malware wants to pull a prank... @The malware calls a WinAPI and... @The EDR system detects it and starts screaming ver…
PT ESC discovered a new Joking Wolf campaign
PT ESC has discovered a new Joking Wolf campaign 🐺 The jokesters infiltrate popular (and not-so-popular) Telegram channels and publish non-existent news. The ma…
Malware in open source!
Mmaallwwaarree iinn ooppeennssoouurrccee! A notable campaign by a single researcher is unfolding online. The following packages belong to him: User lastbright…
How to fix CFG. Part two
How to Fix CFG. Part Two 🛠 Earlier we described how to restore a Control Flow Graph (CFG) when it has been obfuscated. However, often during analysis, even of n…
⚠️ PT ESC experts have detected attempts to exploit the CVE-2025-24071 vulnerability
⚠️ PT ESC experts have detected attempts to exploit the CVE-2025-24071 vulnerability The vulnerability CVE-2025-24071, affecting a wide range of Windows operati…
Spy is back in action
😆Spy is back in action A cyber intelligence team has recorded a new campaign by the hacker group XDSpy aimed at compromising the IT infrastructure of government…