Threat Analysis

The Great VM Escape: ESXi Exploitation in the Wild

A Series of Unfortunate (RMM) Events

Active Exploitation of Gladinet CentreStack/Triofox Insecure Cryptography Vulnerability

AMOS Stealer Exploits AI Trust: Malware Delivered Through ChatGPT and Grok

Velociraptor Misuse, Pt. II: The Eye of the Storm

ClickFix Gets Creative: Malware Buried in Images

Gootloader Returns: What Goodies Did They Bring?

Looking Through a Pinhole at a Qilin Ransomware Attack

Huntress Threat Advisory: Widespread SonicWall SSLVPN Compromise

The Crown Prince, Nezha: A New Tool Favored by China-Nexus Threat Actors

Don’t Sweat the *Fix Techniques

From Custom Scripts to Commodity RATs: A Threat Actor’s Evolution to PureRAT

Huntress Threat Advisory: The Dangers of Storing Unencrypted Passwords

How an Attacker’s Blunder Gave Us a Rare Look Inside Their Day-to-Day Operations

Obscura, an Obscure New Ransomware Variant

The ClickFix Attack That Wasn’t: From a Fake AnyDesk Installer to MetaStealer

Cephalus Ransomware: Don’t Lose Your Head

Exposing Data Exfil: LOLBins, TTPs, and Binaries…Oh, My!