Lab Blog - K7 Labs

Advanced Persistent Threats Cobalt Strike Ransomware

Recently, we came across a tweet about DarkBit ransomware. An Iranian APT group, named MuddyWater, is reportedly behind the DarkBit […]

K7 Labs April 21, 2023

Android Banking Malware Remote Access Trojan

Recently, we came across a detection in our telemetry report named “com.goatmw” which gained our attention. We decided to investigate […]

K7 Labs March 30, 2023

Exploits Vulnerability

In Feb-2023, Microsoft (MS) patched a vulnerability in Microsoft Word which, if successfully exploited, could allow an attacker to execute […]

Anurag Shandilya March 22, 2023

Advanced Persistent Threats Phishing

The DoNot APT (aka APT-C-35) has been active since 2016. They have attacked many individuals and organisations in South Asia. […]

K7 Labs February 23, 2023

Stealer Trojan

Recently OneNote files are being abused a lot to carry malware and users are being tricked to execute the same. […]

K7 Labs February 22, 2023

RVTools Masquerade: How a Signed Fake Installer Deploys a Modular Python RAT