How to Collect Data From Files Using PowerShell

CountLoader Broadens Russian Ransomware Operations With Multi-Version Malware Loader

CountLoader enables Russian ransomware gangs to deploy Cobalt Strike and PureHVNC RAT via Ukraine phishing campaigns.

DPRK Hackers Use ClickFix to Deliver BeaverTail Malware in Crypto Job Scams

DPRK used ClickFix to deliver compiled BeaverTail to crypto marketers; Windows build used password-protected archives, ...

SecurityWeek

Threat Actor Connected to Play, RansomHub and DragonForce Ransomware Operations

Analysis of the malware and tools used in an intrusion links a threat actor to three different ransomware-as-a-service (RaaS) ...

WeLiveSecurity

Gamaredon X Turla collab

ESET researchers reveal how the notorious APT group Turla collaborates with fellow FSB-associated group known as Gamaredon to ...

Security Boulevard

APT37 Targets Windows with Rust Backdoor and Python Loader

IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals ...

MUO on MSN

4 Windows features that don't exist unless you use PowerShell

Many of these aren't obscure developer features or complex system administration tools. The reality is that Windows provides ...

Security Boulevard

Response to CISA Advisory (AA25-239A): Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System

AttackIQ has updated the assessment template that emulates the various post-compromise Tactics, Techniques, and Procedures (TTPs) associated with the Chinese adversary Salt Typhoon and released a new ...