Lab Blog - K7 Labs

Android Deceptive Apps Remote Access Trojan WhatsApp

We at K7 Labs, recently came across an email message as shown in Figure 1, from Indian Railway Catering and […]

Baran S May 10, 2023

Advanced Persistent Threats

We came across a tweet where Mustang Panda APT abuses an Opera Mail binary to sideload a malicious dll and […]

K7 Labs April 24, 2023

Advanced Persistent Threats Cobalt Strike Ransomware

Recently, we came across a tweet about DarkBit ransomware. An Iranian APT group, named MuddyWater, is reportedly behind the DarkBit […]

K7 Labs April 21, 2023

Android Banking Malware Remote Access Trojan

Recently, we came across a detection in our telemetry report named “com.goatmw” which gained our attention. We decided to investigate […]

Lathashree K March 30, 2023

Exploits Vulnerability

In Feb-2023, Microsoft (MS) patched a vulnerability in Microsoft Word which, if successfully exploited, could allow an attacker to execute […]

Anurag Shandilya March 22, 2023

Inside Kimsuky’s Latest Cyberattack: Analyzing Malicious Scripts and Payloads