We came across a tweet where Mustang Panda APT abuses an Opera Mail binary to sideload a malicious dll and […]

Recently, we came across a tweet about DarkBit ransomware. An Iranian APT group, named MuddyWater, is reportedly behind the DarkBit […]

Recently, we came across a detection in our telemetry report named “com.goatmw” which gained our attention. We decided to investigate […]

The DoNot APT (aka APT-C-35) has been active since 2016. They have attacked many individuals and organisations in South Asia. […]

Recently OneNote files are being abused a lot to carry malware and users are being tricked to execute the same. […]