Arama Sonuçları: "#Shellcode"
20 sonuç
IIJ's Naoki Takayama analyses SLOTAGENT, a newly identified multifunctional RAT found in a ZIP uploaded from Japan to a public malware repository. The malware can execute BOF-format payloads, and implements anti-forensic features including time stomping. sect.iij.ad.jp/blog/2026/04/s…
Genians Security Center uncovers an APT37 campaign that used social networking as an initial access vector. Two Facebook accounts set to North Korea-linked locations were used to screen targets, build trust, and move conversations to Messenger. genians.co.kr/en/blog/threat…
Zscaler ThreatLabz reports a Feb 2026 campaign where a fake Adobe Reader lure led to ScreenConnect installation. The report highlights direct in-memory execution & obfuscation methods, including dynamic code that resolves method & type names at runtime. zscaler.com/blogs/security…
I have analyzed a Mustang Panda #PlugX variant (2026-03-17). The analysis revealing : • Thread pool injection via RtlRegisterWait • Multi-stage in-memory loader • C2 extraction & setup Full technical write-up below, enjoy reading😉 0x3obad.github.io/posts/plugx-wr… #MustangPanda #APT
G DATA’s latest loader analysis is part technical, part human. Kiss Loader appears to be a new, actively developed malware that uses Early Bird APC injection; the investigation ended with a rare direct conversation between the analyst & the malware author. blog.gdatasoftware.com/2026/03/38399-…
🐚 Custom Windows shellcode is the ultimate way to learn OS internals and sharpen your assembly skills. 🗺️ Video 1: The Game Plan. We start in C to map out the APIs and logic before hitting the ASM. Watch Part 1: 📺 youtu.be/6oeMEzCKXyo ✅ Dev/Debug workflows ✅ Position-Independence (PIC) ✅ Module & API hashing ✅ Stack strings & Endianness ✅ XOR obfuscation & Decryption stubs
