Jaromir Horejsi
5 articles
-
BlogFake LockBit, Real Damage: Ransomware Samples Abuse Amazon S3 to Steal Data
This article uncovers a Golang ransomware abusing Amazon S3 for data theft, and masking as LockBit to further pressure victims. The discovery of hard-coded AWS credentials in these samples led to AWS account suspensions.
October 16th, 2024 9 minJaromir Horejsi, Nitesh Surana
Read article -
ResearchIPFS: A New Data Frontier or a New Cybercriminal Hideout?
In this article, we briefly detail what IPFS is and how it works at the user level, before providing up to date statistics about the current usage of IPFS by cybercriminals, especially for hosting phishing content. We will also discuss emerging new cybercrime activities abusing the IPFS protocol and detail how cybercriminals already consider IPFS for their deeds.
March 16th, 2023 16 minCedric Pernet, Jaromir Horejsi, Loseway Lu
Read article -
BlogIron Tiger Compromises Chat Application Mimi, Targets Windows, Mac, and Linux Users
We found APT group Iron Tiger's malware compromising chat application Mimi’s servers in a supply chain attack.
August 12th, 2022 8 minDaniel Lunghi, Jaromir Horejsi
Read article -
ResearchExposing Earth Berberoka: A Multiplatform APT Campaign Targeting Online Gambling Sites
Our research uncovers the tools and techniques used by Earth Berberoka across different platforms to target online gambling sites.
May 24th, 2022 6 minDaniel Lunghi, Jaromir Horejsi
Read article -
BlogBIOPASS RAT: New Malware Sniffs Victims via Live Streaming
We discovered a new malware that targets online gambling companies in China via a watering hole attack, in which visitors are tricked into downloading a malware loader disguised as a legitimate installer for well-known apps such as Adobe Flash Player or Microsoft Silverlight.
July 9th, 2021 15 minJoseph C Chen, Kenney Lu, Jaromir Horejsi, Gloria Chen
Read article