Buddy Tancio
3 articles
-
BlogLiving Off Trusted Software: ScreenConnect Abuse Across Phishing, Search, and RMM Chains
In this blog entry, researchers at TrendAI Vision One™ Services – Managed Detection and Response (MDR) walk through how attackers deliver, install, and operate a reconfigured ScreenConnect client, and why it slips past defenses built to catch conventional malware.
August 17th, 2026 15 minBuddy Tancio, Allixon Kristoffer Francisco, Fe Cureg, Aira Marcelo…
Read article -
BlogMalicious OpenClaw Skills Used to Distribute Atomic macOS Stealer
Malicious OpenClaw skills trick AI agents and users into installing a new AMOS variant that steals extensive data at scale.
February 23rd, 2026 8 minAlfredo Oliveira, Buddy Tancio, David Fiser, Philippe Lin…
Read article -
BlogAnalyzing a Multi-Stage AsyncRAT Campaign via Managed Detection and Response
Threat actors exploited Cloudflare's free-tier infrastructure and legitimate Python environments to deploy the AsyncRAT remote access trojan, demonstrating advanced evasion techniques that abuse trusted cloud services for malicious operations.
January 12th, 2026 13 minBuddy Tancio, Jed Valderama, Khristoffer Jocson, Franklynn Uy
Read article