Analysis and mitigations for "The Com", a decentralized, fluid ecosystem of cybercriminals known to constantly rebrand and run shared playbooks.

Get a detailed technical breakdown with execution flow of SolyxImmortal, a Python-based information stealer.

Learn about KiwiStealer capabilities and malware analysis of how it exfiltrates data via HTTP POST requests.

IP addresses and domains aren’t just for blocklists; when analyzed with the right tools, they can be operationalized to enrich alerts, support threat hunting, and uncover risk.

This blog analyzes Albabat ransomware, exploring its config file, executed ransomware commands, and ransom note.

Learn about the information stealing browser extension Rilide, its delivery methods, and intrusion chain.

This link will take you to a page that’s not on LinkedIn

Learn how threat actors leverage browser extensions as an attack vector, including examples for Cyberhaven and GraphQL Network Inspector.

Learn how to install and use Assemblyline, the open-source malware triage tool. This 101 includes an overview, deployment walkthrough, example use case, and resources.

A rewind of the year across the threat landscape and at Pulsedive.

All the deals for InfoSec related software/tools this Black Friday - 0x90n/InfoSec-Black-Friday