A suspicious Windows shortcut concealed a multi-stage loader that unpacked a Cobalt Strike Beacon entirely in memory. This analysis traces the chain from the shortcut’s embedded …
Some time ago, we analyzed a sample with an encrypted payload using an interesting technique. Unfortunately, we can’t share the sample, and it isn’t available on Virustotal …
TL;DR We discovered what we believe is a Client Side Template Injection (CSTI) vulnerability in Nuclei that allows an attacker to crash the scanner (Denial of Service - DoS) and, …