-
GigaWiper: The Backdoor That Poses as Ransomware — Then Wipes Your Disk for Good
Microsoft has detailed GigaWiper, a Go-based Windows backdoor that merges a raw disk wiper, fake ransomware built on Crucio code, and…
-
Claude Code Proxy Detection: Separating Facts from Speculation
Claude Code versions 2.1.193 through 2.1.196 used Unicode steganography to encode China proxy detection signals into system prompts — invisible to…
-
How Ransomware Encrypts Your Files: A Technical Deep Dive
Ransomware uses a hybrid AES-256 + RSA-4096 encryption scheme that’s mathematically unbreakable without the attacker’s master key. Here’s exactly how it…
-
ClickFix on macOS: How Hackers Trick You Into Infecting Your Own Mac
ClickFix is the social engineering technique that bypasses Gatekeeper entirely by tricking macOS users into pasting malicious Terminal commands. Here’s how…
-
LOLBAS: How Hackers Use Windows’ Own Tools Against You
Attackers don’t always bring their own tools. certutil, mshta, regsvr32, wmic — Microsoft-signed binaries already on your machine can download payloads,…
Featured Posts
Popular Posts
-
Claude Code Proxy Detection: Separating Facts from Speculation
Read More: Claude Code Proxy Detection: Separating Facts from SpeculationClaude Code versions 2.1.193 through 2.1.196 used Unicode steganography to encode China proxy detection signals into system prompts — invisible to the eye, but distinct at the byte level.…
Latest Articles
-
Server Message Block (SMB) 101: The Protocol That Keeps Getting Abused
Read More: Server Message Block (SMB) 101: The Protocol That Keeps Getting AbusedSMB — Server Message Block — is one of those protocols that most Windows users have never heard of, but that underpins a huge amount of what happens on…
-
Domain Name System (DNS) Logs 101: The Defender’s Underrated Data Source
Read More: Domain Name System (DNS) Logs 101: The Defender’s Underrated Data SourceIf you ask most security analysts what their most valuable data source is, they’ll say endpoint logs or firewall logs. DNS logs rarely make the top of the list.…
-
PIKABOT: The Malware That Stepped Into QakBot’s Shoes
Read More: PIKABOT: The Malware That Stepped Into QakBot’s ShoesWhen law enforcement took down QakBot in August 2023, many in the security community wondered what would fill the void. The answer came quickly: PIKABOT, a modular malware loader…
-
What Is MCP (Model Context Protocol) and Why the AI World Is Talking About It
Read More: What Is MCP (Model Context Protocol) and Why the AI World Is Talking About ItIf you’ve been paying attention to the AI tooling space recently, you’ve probably come across the term MCP. It stands for Model Context Protocol, and it’s quickly becoming one…
-
Delving Into the Mark of the Web: Windows’ Hidden Security Boundary
Read More: Delving Into the Mark of the Web: Windows’ Hidden Security BoundaryThere’s a little-known security feature built into Windows that quietly influences whether a file you download can run macros, execute scripts, or open without warnings. It’s called the Mark…
-
Exploring RDP Logs: What They Tell You and Why You Should Care
Read More: Exploring RDP Logs: What They Tell You and Why You Should CareRemote Desktop Protocol (RDP) is one of the most widely used — and most abused — features in Windows environments. Whether it’s a legitimate sysadmin logging into a server…
-
BIMI Explained: How Brand Logos in Email Are Changing the Trust Game
Read More: BIMI Explained: How Brand Logos in Email Are Changing the Trust GameYou’ve probably noticed that some emails in your inbox now show a company logo right next to the sender’s name. That little logo is not a coincidence — it’s…
About Author
Subhash Thapa
Security Analyst (SOC, AI, MDR & IR) | CEH | CCSP | CCIO | CSFPC
Latest Posts
Weekly threat intel, straight to your inbox
Free. No noise. Unsubscribe anytime.