Blogs

Introduction ClickFix campaigns have historically relied on user-driven execution techniques, tricking victims into executing malicious commands through seemingly legitimate verification workflows. In recent campaigns, however, attackers have significantly evolved their tradecraft by combining compromised WordPress infrastructure, AI-generated JavaScript payloads, heavy obfuscation, and staged PowerShell delivery mechanisms. During our investigation, we observed a campaign wh

-- Praj Shete Summary A new, sophisticated phishing campaign is impersonating Google AppSheet to push a multi-stage, file-based malware...

Praj Shete What is Process Injection? Process Injection is a technique used by attackers to run malicious code within the address space...

Praj Shete Executive Summary Email remains one of the most exploited attack vectors for cybercriminals, who often leverage domain...

The Colonial Pipeline cyber attack was a ransomware attack that occurred in May 2021. The attack was aimed at Colonial Pipeline, which...

What is MOTW? Mark-of-the-Web is a security feature in Windows that flags files which are downloaded from the internet as the file is...