Rokarolla Android Banking Trojan: Inside a Packed Device-Takeover Platform
The Rokarolla Android banking trojan combines fake login screens, message collection, and remote...
Read More
Hagaseca: Inside a Packed Android RAT Loader
Executive summary Hagaseca is an Android malware cluster associated with exposed Android Debug...
Read More
DragonForce Ransomware Analysis: Inside a Verified Windows Locker
DragonForce is more than a ransomware name. It is a ransomware service ecosystem that affiliates...
Read More
LoaderClient Malware Analysis: How WeedHack Uses Ethereum Smart Contracts for Resilient C2 Infrastructure
Executive Summary LoaderClient is a Minecraft-based malware loader linked to the WeedHack...
Read More
How a Go Binary Locks Down Enterprise Networks in Minutes: The Story Behind Gentlemen Ransomware
Overview The enterprise threat landscape in 2026 has been reshaped by the rapid ascent of...
Read More
Behind .payload: In-Depth Technical Analysis of Payload Ransomware
Payload ransomware is a Windows ransomware family that appends the .payload extension to encrypted...
Read More
PlugX DLL Sideloading via MSI Installer: Complete Malware Analysis of a KorPlug Campaign
PlugX (KorPlug) is a modular remote access trojan delivered in this campaign through an MSI-based...
Read More
Phantom Stealer Analysis: Inside the Two-Layer Attack Chain Hidden Behind a Windows DLL
Phantom Stealer is a two-layer Windows infostealer attack chain that uses a malicious pdh.dll...
Read More
Salat Stealer Analysis: Go-Based RAT, C2 Resilience, and Info-Stealing Capabilities
Executive Overview Salat Stealer is a sophisticated Go-based Remote Access Trojan (RAT) with deep...
Read More
In-Depth Technical Analysis Of VECT Ransomware
Overview On January 19, 2026, the Vect ransomware operation publicly announced its affiliate...
Read More