logo

Binary Defense Blog

ID: 6a9b10fe-0158-502e-9ec2-79149fcf2ea1

STIX ID: identity--6a9b10fe-0158-502e-9ec2-79149fcf2ea1

Feed Type: skeleton

Earliest post: 2025-08-10

Latest post: 2026-07-21

The Binary Defense Blog delivers actionable threat research, malware analysis, and practical security insights to help defenders detect and respond to evolving cyber threats.

01/01/2020
10/19/2026
Title Date Published ↓Threat ScoreAuthorVisible
Platypwned: When a Citrix 0-Day Lays an Egg2026-10-1285True
24/7 M365 – All Ransom, No Ware2026-10-0180True
RemusStealer: EtherHiding In Hidden Windows2026-09-3072True
Dindoor - The Technical Analysis of an Iranian Backdoor2026-08-2585True
BLUERABBIT: A Golang-Based Backdoor with Ransomware…2026-06-0888True
Attackers Went Agentic First2026-05-2780True
Chasing Phantoms: How a Multi-Stage Stealer Abuses…2026-04-1472True
Remote Support to Ransomware Foothold: Stopping a…2026-04-0870True
Windows Defender ACL Blocking: A Silent Technique With Serious Impact2026-02-2770True
When Paychecks Become the Prize: A Deeper Look at…2026-02-1265True
When Access Brokers Go Interactive: ClickFixin’ to Python Your Network2026-02-0678True
Slivering Through The Cracks2026-02-0460True
What Defined Defense in 20252026-01-0875True
Evolutions in Offensive Toolkits: Phishing2026-01-0855True
DeedRAT: Unpacking a Modern Backdoor’s Playbook2025-12-3085True
GlytchC2: A Bug in the Livestream2025-11-0540True
A Practical Guide to Deobfuscating a Stupidly Long JavaScript Stealer2025-10-3172True
DON’T FREEZE ME OUT, BRO! ARC Labs Technical Analysis of EDR-Freeze2025-09-2270True
Active Shellshock SMTP Botnet Campaign2025-09-2170True
United States Postal Service Breached2025-09-2180True
Petya Ransomware Without The Fluff2025-09-1090True
DefendNot: Turning Windows Defender Against Itself2025-09-0370True
War in Ukraine and Its Impact on Hackers2025-08-1275True
4 Tactics to Detect & Contain Emotet’s Latest Evolution2025-08-1275True
Russia may be Pressing Arrested Cyber Criminals into Service2025-08-1275True
Cyber War: Hackers' Transformation from Cyber Criminals to Hacktivists2025-08-1270True
ThreadSleeper: Suspending Threads via GMER64 Driver2025-08-1270True
The Insider Threat: Why Your Greatest Security Risk…2025-08-1255True
Hunting and Defeating Evasive Threats2025-08-1255True
Using Microsoft Sentinel to Detect Confluence…2025-08-1275True
Creating YARA Rules Based on Code2025-08-1250True
Qakbot Strikes Back: Understanding the Threat2025-08-1272True
MalSync Teardown: From DLL Hijacking to PHP Malware for Windows2025-08-1278True
Technical Analysis: Killer Ultra Malware Targeting…2025-08-1278True
Qakbot Upgrades to Stealthier Persistence Method2025-08-1275True
Shining a Light in the Dark – How Binary Defense…2025-08-1270True
Third party vendors present a security risk—how your…2025-08-1290True
IcedID GZIPLOADER Analysis2025-08-1278True
Unemployment Fraud on the Rise2025-08-1260True
Rhadamanthys Stealer Analysis for Detection Opportunities2025-08-1270True
Understanding Sleep Obfuscation2025-08-1255True
Attack on a water treatment plant highlights…2025-08-1275True
Cybersecurity predictions for 2021 after an unpredictable 20202025-08-1285True
What Do Criminal Hackers and Scammers Discuss on Forums?2025-08-1255True
What is Carding?2025-08-1270True
Russian Cybercriminal Group Attempts to Steal…2025-08-1285True
Mars-Deimos: From Jupiter to Mars and Back again (Part Two)2025-08-1275True
Cleo MFT Mass Exploitation Payload Analysis2025-08-1280True
Solarmarker: By Any Other Name (Mars-Deimos part 3)2025-08-1275True
Mars-Deimos: SolarMarker/Jupyter Infostealer (Part 1)2025-08-1270True

1–50 of 125