DeepLoad exploits ClickFix and WMI persistence to steal credentials, enabling stealth reinfection after three days.

Abstract: Accurate soil-moisture content measurement is crucial for agricultural productivity and environmental monitoring, driving extensive research into measurement techniques that are both precise ...

Instead of the usual phishing email or fake download page, attackers are using Google Forms to kick off the infection chain.

Those weird codes actually makes sense, just not to you.

Abstract: With the rising demand for website data storage, leveraging cloud storage services for vast user file storage has become prevalent. Nowadays, a new file upload scenario has been introduced, ...

AssetVault is a comprehensive IT Asset Management (ITAM) platform designed to capture, report, and manage system diagnostics and hardware inventory using a powerful PowerShell-driven WPF interface.

This specific file was previously identified in older campaigns as a loader for the Havoc framework. Its reappearance alongside vibeware provides a strong indicator of continuity between the ...

I'd like to thank my coauthors Adrian Schipor, Victor Vrabie, Marius Baciu, and Martin Zugec for their invaluable contributions to this research. This research provides a direct look at the new ...