Fernando Mercês
7 articles
-
BlogBPFDoor’s Hidden Controller Used Against Asia, Middle East Targets
A controller linked to BPF backdoor can open a reverse shell, enabling deeper infiltration into compromised networks. Recent attacks have been observed targeting the telecommunications, finance, and retail sectors across South Korea, Hong Kong, Myanmar, Malaysia, and Egypt.
April 14th, 2025 11 minFernando Mercês
Read article -
ResearchAI vs AI: DeepFakes and eKYC
This analysis investigates the security risks of eKYC systems in relation to deepfake attacks, highlighting the diverse strategies employed by cybercriminals in bypassing eKYC security measures.
November 28th, 2024 15 minPhilippe Lin, Fernando Mercês, Roel Reyes, Ryan Flores…
Read article -
BlogPawn Storm Uses Brute Force and Stealth Against High-Value Targets
To help defenders learn more about Pawn Storm's activities and adjust their defenses, we offer a technical analysis of some of the threat actor's recent and updated techniques.
January 31st, 2024 12 minFeike Hacquebord, Fernando Mercês
Read article -
ResearchHow BPF-Enabled Malware Works: Bracing for Emerging Threats
We discuss proof-of-concept rootkits and malware used by cybercriminals in conjunction with Berkeley Packet Filtering (BPF), a piece of technology that allows programs to execute code in the operating systems of popular cloud-computing platforms. We also show how to detect such threats.
October 19th, 2023 15 minFernando Mercês, With contributions from Joey Costoya
Read article -
BlogCyclops Blink Sets Sights on Asus Routers
This report discusses the technical capabilities of this Cyclops Blink malware variant that targets ASUS routers and includes a list of more than 150 current and historical command-and-control (C&C) servers of the Cyclops Blink botnet.
March 17th, 2022 16 minFeike Hacquebord, Stephen Hilt, Fernando Mercês
Read article -
ResearchReinforcing NAS Security Against Pivoting Threats
We analyze some existing and developing threats that target NAS devices of users and businesses.
January 20th, 2022 3 minStephen Hilt, Fernando Mercês
Read article -
ResearchUncovering IoT Threats in the Cybercrime Underground
Understanding current and future threats to the internet of things (IoT) can help shape how we secure this technology that is increasingly becoming integral to today's world. What insights can be reaped from the cybercrime underground?
September 10th, 2019 3 minStephen Hilt, Vladimir Kropotov, Fernando Mercês, Mayra Rosario…
Read article