Lab Blog - K7 Labs

Advanced Persistent Threats

We came across a tweet where Mustang Panda APT abuses an Opera Mail binary to sideload a malicious dll and […]

K7 Labs April 24, 2023

Advanced Persistent Threats Cobalt Strike Ransomware

Recently, we came across a tweet about DarkBit ransomware. An Iranian APT group, named MuddyWater, is reportedly behind the DarkBit […]

Sudeep April 21, 2023

Android Banking Malware Remote Access Trojan

Recently, we came across a detection in our telemetry report named “com.goatmw” which gained our attention. We decided to investigate […]

Lathashree K March 30, 2023

Exploits Vulnerability

In Feb-2023, Microsoft (MS) patched a vulnerability in Microsoft Word which, if successfully exploited, could allow an attacker to execute […]

Anurag Shandilya March 22, 2023

Advanced Persistent Threats Phishing

The DoNot APT (aka APT-C-35) has been active since 2016. They have attacked many individuals and organisations in South Asia. […]

Vigneshwaran P February 23, 2023

AwSpy – New Spyware Targets South Korean Android users