Chinese APT “Operation LagTime IT” Targets Government Information Technology Agencies in Eastern Asia

https://www.proofpoint.com/us/threat-insight/post/chinese-apt-operation-lagtime-it-targets-government-information-technology (Cotx RAT malware reversing)

AndroMut Downloader

https://www.proofpoint.com/us/threat-insight/post/ta505-begins-summer-campaigns-new-pet-malware-downloader-andromut-uae-south (co-author)

Cryptopals Set 2: Block crypto

Set 2 is up on GitHub.

Steal or Get Off the KPOT

https://www.proofpoint.com/us/threat-insight/post/new-kpot-v20-stealer-brings-zero-persistence-and-memory-features-silently-steal

Cryptopals Set 1: Basics

Working my way through the Cryptopals crypto challenges using Python. Set 1 is up on GitHub.

DanaBot control panel revealed

https://www.proofpoint.com/us/threat-insight/post/danabot-control-panel-revealed

ServHelper and FlawedGrace - New malware introduced by TA505

https://www.proofpoint.com/us/threat-insight/post/servhelper-and-flawedgrace-new-malware-introduced-ta505 (co-author)