Blogsby GlyphWordlistLoader Delivering Amatera via ClearFake Campaigns
New Loader Hiding Shellcode in Plain English Words
2 of 800 posts
Tue Aug 181 post
Fri Aug 141 post
A 12 KB Backdoor Hid Its C2 Domain in desktop.ini Whitespace
A hand-written Windows backdoor stored its command-and-control domain as the number of trailing spaces in a fake desktop.ini, and we found it on exactly one machine.