6 stories, newest first · one card per story
UAC-0099's MATCHBOIL downloader evolved with sandbox checks, .NET Reactor obfuscation, scheduled-task persistence, and recurring C2, hitting Ukrainian transport and energy firms.
Microsoft says Star Blizzard ran 13 fake-event-invite campaigns since January, hitting 100+ Ukraine-linked organizations with the CosmicPulse backdoor via scheduled tasks.
Securonix documents new TASK#STOMP PowerShell backdoor stealing documents, Wi-Fi passwords, clipboard data and screenshots with layered persistence.
TASK#STOMP Windows backdoor combines VBScript, PowerShell, scheduled tasks, and runtime C# compilation for resilient document theft and remote command execution.
Securonix dissects TASK#STOMP, a Windows backdoor exfiltrating business documents, Wi-Fi passwords, screenshots, and clipboard data via five persistence footholds.
Huntress reconstructed an INC ransomware attack hitting 175 endpoints and domain controllers, with two ransom notes dropped 53 minutes apart.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views