2025-01-29 | Xavier Mertens | From PowerShell to a Python Obfuscation Race! |
2025-01-28 | Xavier Mertens | Fileless Python InfoStealer Targeting Exodus |
2024-11-30 | Xavier Mertens | From a Regular Infostealer to its Obfuscated Version |
2024-11-22 | Xavier Mertens | An Infostealer Searching for « BIP-0039 » Data |
2024-11-07 | Xavier Mertens | Steam Account Checker Poisoned with Infostealer |
2024-10-09 | Xavier Mertens | From Perfctl to InfoStealer |
2024-09-18 | Xavier Mertens | Python Infostealer Patching Windows Exodus App |
2024-08-27 | Xavier Mertens | Why Is Python so Popular to Infect Windows Hosts? |
2024-07-26 | Xavier Mertens | ExelaStealer Delivered "From Russia With Love" |
2024-05-31 | Xavier Mertens | "K1w1" InfoStealer Uses gofile.io for Exfiltration |
2024-02-20 | Xavier Mertens | Python InfoStealer With Dynamic Sandbox Detection |
2024-01-25 | Xavier Mertens | Facebook AdsManager Targeted by a Python Infostealer |
2023-12-22 | Xavier Mertens | Shall We Play a Game? |
2023-09-29 | Xavier Mertens | Are You Still Storing Passwords In Plain Text Files? |
2023-05-04 | Xavier Mertens | Infostealer Embedded in a Word Document |
2023-03-01 | Xavier Mertens | Python Infostealer Targeting Gamers |
2022-12-18 | Guy Bruneau | Infostealer Malware with Double Extension |
2022-08-11 | Xavier Mertens | InfoStealer Script Based on Curl and NSudo |
2022-04-06 | Brad Duncan | Windows MetaStealer Malware |
2022-03-23 | Brad Duncan | Arkei Variants: From Vidar to Mars Stealer |
2022-03-09 | Xavier Mertens | Infostealer in a Batch File |
2021-12-21 | Xavier Mertens | More Undetected PowerShell Dropper |
2021-12-01 | Xavier Mertens | Info-Stealer Using webhook.site to Exfiltrate Data |
2021-07-09 | Brad Duncan | Hancitor tries XLL as initial malware file |
2021-06-30 | Brad Duncan | June 2021 Forensic Contest: Answers and Analysis |
2021-04-06 | Jan Kopriva | Malspam with Lokibot vs. Outlook and RFCs |
2021-03-31 | Xavier Mertens | Quick Analysis of a Modular InfoStealer |
2019-11-27 | Brad Duncan | Finding an Agent Tesla malware sample |
2019-10-09 | Brad Duncan | What data does Vidar malware steal from an infected host? |
2019-01-24 | Brad Duncan | Malspam with Word docs uses macro to run Powershell script and steal system data |
2017-03-08 | Xavier Mertens | Not All Malware Samples Are Complex |