Deschide articolul original într-un tab nou Schimbarea acestei opțiuni se aplică imediat și reîncarcă pagina.
LECTURA
Înapoi la articole →

Malware Analysis, Phishing, and Email Scams

malwr-analysis.com/feed/atom/
Vizitează site-ul

Cel mai recent articol

Ultima verificare

Urmăritori 0 urmăritori
Articole: 10

  1. Investigating a Multi-Stage PowerShell Loader

    (Malware Analysis, Phishing, and Email Scams)

    Introduction During recent threat hunting, I identified suspicious PowerShell content being served directly from an IP address and a domain: hxxp://203[.]188[.]171[.]166/ hxxps://dorenzaa[.]com/ Both locations returned PowerShell rather than a conventional

  2. ClickFix Site Abusing Cloudflare Pages to Deliver Lumma Stealer

    (Malware Analysis, Phishing, and Email Scams)

    While looking for phishing sites, I came across a suspicious Cloudflare Pages site hosted at: hxxps://zipsage.pages[.]dev The site presents itself as an “Adobe Activation Guide” and instructs users to manually execute a PowerShell command, a technique com…

  3. Fake Microsoft Teams Download Page Delivers ClickFix Chrome Update Payload

    (Malware Analysis, Phishing, and Email Scams)

    Recently, I came across another ClickFix-style campaign pretending to install a Chrome security update.

  4. Ongoing Phishing Campaign Abusing Google Cloud Storage to Redirect Users to Multiple Scam Pages

    (Malware Analysis, Phishing, and Email Scams)

    A few days ago, I published a blog analyzing a phishing campaign abusing Google Cloud infrastructure: Analysis of an Integrated Phishing Campaign Utilizing Google Cloud Infrastructure While continuing to monitor the infrastructure used in that campaign, I…

  5. Analysis of an Integrated Phishing Campaign Utilizing Google Cloud Infrastructure

    (Malware Analysis, Phishing, and Email Scams)

    In recent weeks, a highly organized phishing campaign has surfaced, characterized by its use of legitimate Google infrastructure to bypass standard security filters.

  6. Yoroi Wallet Phishing Abuses GoTo Resolve and ScreenConnect for Device Takeover

    (Malware Analysis, Phishing, and Email Scams)

    Overview I recently came across a phishing campaign impersonating the Yoroi Desktop Wallet, targeting cryptocurrency users with what looked like a legitimate upgrade.

  7. Crypto Compensation Scam: Fake BTC Payout Lure Abusing Survey & Payment Flows

    (Malware Analysis, Phishing, and Email Scams)

    Overview I recently came across a message containing the following link: hxxps://yandex[.]com/poll/PdZ7vgekGrNakuXZcpiB6b At first, it didn’t look suspicious.

  8. Kraken Darknet Access via Clearnet Gateways

    (Malware Analysis, Phishing, and Email Scams)

    Introduction Recent threat intelligence analysis uncovered a login surface associated with the Kraken darknet ecosystem that is simultaneously exposed through traditional clearnet domains and Tor onion services.

  9. Cloudflare Pages “Continue Read” Redirect Kit Abused for Phishing, Adware, and Malware Delivery

    (Malware Analysis, Phishing, and Email Scams)

    I identified a long-running redirect infrastructure abusing Cloudflare Pages (pages.dev) to host benign-looking SEO articles (for example, celebrity “net worth” blogs or gaming help content) that display a forced “Continue reading / Continue Read” pop-up…

  10. Tycoon 2FA Campaign Abusing *.contractors Domains for Gmail and Microsoft 365 Credential Harvesting

    (Malware Analysis, Phishing, and Email Scams)

    Overview Over the past few weeks, I have been tracking a credential harvesting campaign that repeatedly abuses newly registered *.contractors domains to deliver Gmail and Microsoft 365/Outlook phishing pages.