Deschide articolul original într-un tab nou Schimbarea acestei opțiuni se aplică imediat și reîncarcă pagina.
LECTURA
Înapoi la articole →

Synaptic Security Blog

blog.synapticsystems.de/feed/
Vizitează site-ul

Cel mai recent articol

Ultima verificare

Urmăritori 0 urmăritori
Articole: 10

  1. Wenn der Staat das Licht ausmacht: Warum die IFG-Novelle die deutsche Threat-Intelligence-Arbeit trifft

    (Synaptic Security Blog)

    by Robin Dost Ein Kommentar aus der Praxis der Cyber Threat Intelligence PETITION UNTERSCHREIBEN This article is written in German, since it concerns German domestic policy and legislation.

  2. Inside Kimsuky’s CHM Tradecraft: Multi-Stage Execution and Selective Payload Delivery

    (Synaptic Security Blog)

    by Robin Dost Subscribe Newsletter Actor tracking: APT43 (Kimsuky) / MB-0010 I can’t sleep right now, because it’s too hot in Germany, so i thought why not finishing an analysis i almost forgot about.

  3. UAC-0184 Tooling Evolution: OneDrive Sideload to Remcos

    (Synaptic Security Blog)

    by Robin Dost Subscribe Newsletter Malware: HijackLoader / IDATLoader -> Remcos Agent 7.1.0 Pro Actor tracking: UAC-0184 / MB-0005 Related analysis: UAC-0184: From HTA to a Signed Network Stack A YARA rule for this sample is available on request: contact@…

  4. Tracking UAC-0226 Tooling Evolution: From WinRAR ADS to Reflective GIFTEDCROOK Loading

    (Synaptic Security Blog)

    by Robin Dost Subscribe Newsletter A few months ago, I analyzed a UAC-0226 campaign delivering a GIFTEDCROOK stealer through a weaponized WinRAR archive.

  5. GhostShell (MB-0009): Targeting Ukraine’s UAV Operations and Defense Supply Chain

    (Synaptic Security Blog)

    by Robin Dost Subscribe Newsletter Today, we are taking a look at malware linked to yet another threat actor, one that has been active since at least February 2026.

  6. IIM Feed: Attack Pattern Mapping for Adversary Infrastructure (5/7)

    (Synaptic Security Blog)

    by Robin Dost Part 5 of 7 of building the Malwarebox Ecosystem URL: https://feed.iim.malwarebox.eu Malwarebox: https://malwarebox.eu IIM: https://iim.malwarebox.eu IIM Spec: https://github.com/MalwareboxEU/IIM I have been working on IIM for a while now, m…

  7. UAC-0244 / UAC-0247: Malware Targeting FPV drone operators

    (Synaptic Security Blog)

    by Robin Dost Subscribe Newsletter Surprise, surprise – a new UAC article 😁 Actor: UAC-0244 / UAC-0247 / MB-0006 Malwarebox Identifier: 0006 IIM Chain: https://feed.iim.malwarebox.eu/chain/uac-0247-ukrvarta-fpv-dopomoga-2026-03 This article is a little bit

  8. UAC-0184: From HTA to a Signed Network Stack

    (Synaptic Security Blog)

    by Robin Dost Subscribe Newsletter EDIT: The next article in my UAC series is out: https://blog.synapticsystems.de/uac-0247-malware-targeting-fpv-operators/ Actor: UAC-0184 / MB-0007 (Malwarebox ID IIM Chain: https://feed.iim.malwarebox.eu/chain/uac-0184-…

  9. IIMQL – The Query Language for Adversary Infrastructure (4/7)

    (Synaptic Security Blog)

    by Robin Dost Part 4 of 7 of building the Malwarebox Ecosystem Website: https://iimql.malwarebox.eu GitHub: https://github.com/MalwareboxEU/IIMQL In the previous part, I introduced IIM, the Infrastructure Intelligence Model.

  10. IIM – The Grammar of Adversary Infrastructure (3/7)

    (Synaptic Security Blog)

    by Robin Dost Part 3 of 7 of building the Malwarebox Ecosystem Official Website: https://iim.malwarebox.eu GitHub: https://github.com/MalwareboxEU/IIM EDIT: I released part 4 / 7 “IIMQL – The Query Language for Adversary Infrastructure (4/7)“ Threat intel…