Microsoft

StealC and Amadey: Breaking down infostealers and the cybercrime services that deliver them

On June 24, 2026, Microsoftโ€™s Digital Crimes Unit (DCU) facilitated the takedown, suspension, and blocking of domains that ...
Microsoft

Crypto Clipper uses Tor and worm-like propagation for persistence and control

Microsoft Threat Intelligence analyzed a cryptocurrency clipper campaign that combines clipboard theft, wallet replacement, ...
WeLiveSecurity

FishMongerโ€™s arsenal upgraded: SprySOCKS for Windows

ESET researchers have discovered SprySOCKS for Windows, FishMongerโ€™s backdoor weaponizing a kernel driver for advanced ...
WeLiveSecurity

Killing me gently: Inside Gentlemenโ€™s EDR killer framework

ESET researchers analyzed the robust EDR-killing toolset of the ransomware-as-a-service gang Gentlemen. Since the beginning of 2026, Gentlemen has emerged as one of the most active gangs in the ...
GitHub

powershell_fileless_script_contains_base64_encoded_content.yml

description: The following analytic detects the execution of PowerShell scripts containing Base64 encoded content, specifically identifying the use of `FromBase64String`. It leverages PowerShell ...
LinkedIn

Deprecating the "Backup with Shell Scripts" page

๐ƒ๐ž๐ฉ๐ซ๐ž๐œ๐š๐ญ๐ข๐ง๐  ๐ญ๐ก๐ž โ€œ๐๐š๐œ๐ค๐ฎ๐ฉ ๐ฐ๐ข๐ญ๐ก ๐’๐ก๐ž๐ฅ๐ฅ ๐’๐œ๐ซ๐ข๐ฉ๐ญ๐ฌโ€ ๐ฉ๐š๐ ๐ž ๐Ÿ๐จ๐ซ ๐ญ๐ก๐ž ๐”๐›๐ฎ๐ง๐ญ๐ฎ ๐ฌ๐ž๐ซ๐ฏ๐ž๐ซ ๐๐จ๐œ๐ฌ Deprecating the โ€œBackup with Shell Scriptsโ€ page for the ...
OSTechNix

Nmap Commands Explained: The Complete Guide to Network Scanning

Learn essential Nmap commands for network scanning, port discovery, and OS detection. Complete guide with examples and a ...
GitHub

A-poc/RedTeam-Tools

Customer stories Events & webinars Ebooks & reports Business insights GitHub Skills ...