BlooSystems

Threat intel in 5 mins, delivered daily. - Automated pulls from sources like Unit 42 & ThreatPost - AI distills key takeaways - Briefings land in Slack/Gmail No noise, just clarity. Full breakdown: buff.ly/OQ3k5mc

Research Update: Microsoft’s Legal Action Against Lumma Stealer Research findings: In May 2025, Microsoft and U.S. authorities coordinated legal action targeting Lumma Stealer. buff.ly/Z6lY9MR #LawEnforcement #LummaStealer #Microsoft #ThreatResearch #BlooSystems

Research Update: The Business Impact of System BC Infections Research findings: System BC-facilitated ransomware attacks have led to multimillion-dollar financial losses buff.ly/cEgW5BI #BusinessImpact #SystemBC #Ransomware #ThreatResearch #BlooSystems

Research Update: Quasar RAT’s Capabilities Research findings: Supports file management, process control, keylogging, and remote desktop access buff.ly/92Y8gzk #QuasarRAT #GOSAR #RemoteAccess #ThreatResearch #BlooSystems

Research Alert: Mimikatz Research findings: Actively leveraged by both cybercriminal groups and state-sponsored actors buff.ly/NGgPw25 #Mimikatz #CredentialTheft #ThreatResearch #Cybersecurity #BlooSystems

Research Analysis: Lumma Stealer’s Advanced Evasion Techniques Research findings: Uses code obfuscation and anti-debugging routines to resist reverse engineering buff.ly/Z6lY9MR #LummaStealer #EvasionTechniques #ThreatResearch #Cybersecurity #BlooSystems

Research Update: DarkGate’s Threat Actor Ecosystem Research findings: Employed by Vietnamese cybercriminals to hijack Facebook business accounts buff.ly/zGUSHzM #DarkGate #ThreatActors #Ransomware #ThreatResearch #BlooSystems

Research Update: System_BC in the Ransomware Supply Chain Research findings: - Linked to major RaaS operations including Ryuk, Egregor, and DarkSide buff.ly/cEgW5BI #SystemBC #Ransomware #ThreatResearch #Cybersecurity #BlooSystems

Research Update: Lumma Stealer MaaS Model Research findings: • Subscriptions available for as little as $250 buff.ly/Z6lY9MR #LummaStealer #MaaS #ThreatResearch #Cybersecurity #BlooSystems

Research Update: DarkGate Multi-Channel Delivery Research findings: • Delivered via phishing, social media (LinkedIn), and enterprise chat apps (Skype/Teams) buff.ly/zGUSHzM #DarkGate #DeliveryMechanisms #ThreatResearch #Cybersecurity #BlooSystems

Nine days, nine colors, one spirit! At Bloo, we celebrated Navratri in full vibrance — each day bringing out a new shade of tradition, joy, and togetherness. From twirling in style to savoring festive flavors, our office turned into a colorful canvas of culture and cheer.

Research Update: CobaltStrike Infrastructure Takedowns Research findings: The 2023 operation reportedly reduced illicit CobaltStrike use by 80% buff.ly/zGUSHzM #CobaltStrike #InfrastructureTakedown #ThreatResearch #Cybersecurity #BlooSystems

Sometimes the best way to learn is by inviting attackers in. A Windows honeypot with weak creds + fake services (SSH, RDP, FTP, SMB) drew brute-force hits, SQLi & more—revealing real TTPs in action. Full breakdown - buff.ly/qUIWYY8

Research Update: Quasar RAT Evolution Findings: • Adopted by APT groups including APT10 and APT33 Full analysis: buff.ly/92Y8gzk #QuasarRAT #GOSAR #MalwareEvolution #ThreatResearch #BlooSystems

Research Update: State Actors and Mimikatz Findings: • APT41 uses Mimikatz in campaigns against healthcare and technology sectors Full analysis: buff.ly/NGgPw25 #StateActors #APT #Mimikatz #ThreatResearch #BlooSystems

Onam vibes still lingering... For Onam we turned the Bloo office into a slice of Kerala - full of smiles, tradition, and great food. Grateful for a team that knows how to work and celebrate together. #Onam2025 #TeamWork #Celebrations

Research Update: DarkGate’s Premium MaaS Model Key findings: • Subscriptions cost up to $15,000 per month • Feature set includes hidden VNC, keylogging, and rootkit modules Full analysis: buff.ly/zGUSHzM #DarkGate #MaaS #ThreatResearch #Cybersecurity #BlooSystems

Malware hides. Advanced attackers go further, disabling defenses first. Dark-Kill rootkits abuse Windows callbacks to block EDRs (e.g. MsSense.exe) before launch. Defenses: Secure Boot, driver checks & more - buff.ly/okBB3YK

Research Update: State Actors and CobaltStrike Key findings: • APT29 (Cozy Bear) leveraged CobaltStrike in the SolarWinds supply chain attack Full analysis: buff.ly/HdSB28g #StateActors #APT #CobaltStrike #ThreatResearch #BlooSystems

DLL checks often miss process injection. Memory offset analysis with Sysmon is stronger: - Spot anomalies in ntdll.dll - Flag zero/high-memory regions - Apply Z-scores for precision Cuts noise, catches stealthy attacks. Read more here - buff.ly/nkpO74m