| 2020-08-06 | Xavier Mertens | A Fork of the FTCode Powershell Ransomware |
| 2020-05-13 | Brad Duncan | Malspam with links to zip archives pushes Dridex malware |
| 2020-04-08 | Brad Duncan | German malspam pushes ZLoader malware |
| 2020-03-25 | Brad Duncan | Recent Dridex activity |
| 2020-02-22 | Xavier Mertens | Simple but Efficient VBScript Obfuscation |
| 2020-02-07 | Xavier Mertens | Sandbox Detection Tricks & Nice Obfuscation in a Single VBScript |
| 2019-11-20 | Brad Duncan | Hancitor infection with Pony, Evil Pony, Ursnif, and Cobalt Strike |
| 2019-10-18 | Xavier Mertens | Quick Malicious VBS Analysis |
| 2019-09-12 | Xavier Mertens | Rig Exploit Kit Delivering VBScript |
| 2019-08-22 | Xavier Mertens | Simple Mimikatz & RDPWrapper Dropper |
| 2019-02-14 | Xavier Mertens | Old H-Worm Delivered Through GitHub |
| 2018-09-13 | Xavier Mertens | Malware Delivered Through MHT Files |
| 2018-05-25 | Xavier Mertens | Antivirus Evasion? Easy as 1,2,3 |
| 2017-08-26 | Didier Stevens | Malware analysis: searching for dots |
| 2017-07-08 | Xavier Mertens | A VBScript with Obfuscated Base64 Data |
| 2017-03-12 | Guy Bruneau | Honeypot Logs and Tracking a VBE Script |
| 2010-03-01 | Mark Hofman | IE 0-day using .hlp files |
| 2008-04-03 | Bojan Zdrnja | Mixed (VBScript and JavaScript) obfuscation |
