Recently, we came across a detection in our telemetry report named “com.goatmw” which gained our attention. We decided to investigate […]

We at K7 Labs recently identified an interesting technique used by threat actors to execute a Remote Admin Tool. We […]

We at K7 Labs recently found an interesting new .NET loader which downloads and executes KoiVM virtualized binary, which in […]

Threat actors are constantly using new tricks and tactics to target users across the globe. This blog is about SpyNote,  […]

Hackers have been abusing cloud services to host their malicious payloads and then use a downloader/loader to deploy them in […]