Emmanuel Panopio
4 articles
-
BlogUnraveling Water Saci's New Multi-Format, AI-Enhanced Attacks Propagated via WhatsApp
Through AI-driven code conversion and a layered infection chain involving different file formats and scripting languages, the threat actors behind Water Saci are quickly upgrading their malware delivery and propagation methods across WhatsApp in Brazil.
December 2nd, 2025 16 minJeffrey Francis Bonaobra, Sarah Pearl Camiling, Joe Soares, Byron Gelera…
Read article -
BlogActive Water Saci Campaign Spreading Via WhatsApp Features Multi-Vector Persistence and Sophisticated C&C
Continuous investigation on the Water Saci campaign reveals innovative email-based C&C system, multi-vector persistence, and real-time command capabilities that allow attackers to orchestrate coordinated botnet operations, gather detailed campaign intelligence, and dynamically control malware activity across multiple infected machines.
October 27th, 2025 16 minJeffrey Francis Bonaobra, Joe Soares, Emmanuel Panopio
Read article -
BlogAI生成コードと偽アプリによって広範な被害をもたらす攻撃活動「EvilAI」
AI生成コードやソーシャルエンジニアリングを用いた攻撃活動「EvilAI」は、精巧な偽アプリにマルウェアを仕込むことで検知を回避し、世界各地の組織から情報を窃取します。
September 11th, 2025 18 minJeffrey Francis Bonaobra, Joshua Aquino, Emmanuel Panopio, Emmanuel Roll…
Read article -
BlogWarlock: From SharePoint Vulnerability Exploit to Enterprise Ransomware
Warlock ransomware exploits unpatched Microsoft SharePoint vulnerabilities to gain access, escalate privileges, steal credentials, move laterally, and deploy ransomware with data exfiltration across enterprise environments.
August 20th, 2025 14 minJeffrey Francis Bonaobra, Joshua Aquino, Mohammed Malubay, John Paul Lim…
Read article