Threat Intelligence & Research

Inside “SalatStealer” — Reverse Engineering a YouTube Bitcoin Brute Tool Malware

When Malware Wears a Brand: Zoom Lure → Fake Microsoft Marketplace → Remote Access via Zoho

A new attack chain uses brand impersonation and legitimate tools to bypass detection—turning everyday collaboration into a covert entry point.

Operation Gauloises: How One Operator Bridges the DarkWeb to the Levant via Whish Money

Technical Analysis of DarkWeb Liquidity Off-Ramping via Levantine Fintech

Device Authentication Phishing: Account Takeover via Microsoft Device Code Flow

How attackers exploit Microsoft device code flow to bypass MFA and gain persistent account access

Autumn Dragon: China-nexus APT Group Targets South East Asia

Stop Account Takeover Before It Starts: Introducing PreBreach Identity Guard