Paul John Bardon
4 articles
-
BlogMalware auto-replicante se propaga a través de WhatsApp, apunta a usuarios brasileños
TrendAI™ Research ha identificado una campaña activa que se propaga a través de WhatsApp mediante un archivo adjunto ZIP. Al ejecutarse, el malware establece persistencia y secuestra la cuenta de WhatsApp comprometida para enviarse a los contactos de la víctima.
October 3rd, 2025 15 minJeffrey Francis Bonaobra, Maristel Policarpio, Sophia Nilette Robles, Cj Arsley Mateo…
Read article -
BlogRevisiting UNC3886 Tactics to Defend Against Present Risk
We examine the past tactics used by UNC3886 to gain insight on how to best strengthen defenses against the ongoing and emerging threats of this APT group.
July 28th, 2025 9 minCj Arsley Mateo, Ieriz Nicolle Gonzalez, Jacob Santos, Paul John Bardon…
Read article -
BlogAI-Assisted Fake GitHub Repositories Fuel SmartLoader and LummaStealer Distribution
In this blog entry, we uncovered a campaign that uses fake GitHub repositories to distribute SmartLoader, which is then used to deliver Lumma Stealer and other malicious payloads. The campaign leverages GitHub’s trusted reputation to evade detection, using AI-generated content to make fake repositories appear legitimate.
March 11th, 2025 10 minCj Arsley Mateo, Jacob Santos, Darrel Tristan Virtusio, Junestherry Dela Cruz…
Read article -
BlogNew Info Stealer Bandit Stealer Targets Browsers, Wallets
This is an analysis of Bandit Stealer, a new Go-based information-stealing malware capable of evading detection as it targets multiple browsers and cryptocurrency wallets.
May 26th, 2023 9 minSarah Pearl Camiling, Paul John Bardon
Read article