Aaron Beardslee
@abeardsleeTrusted contributorCompletionist
2 followers335 downloads147 copies29 likes3,724 views
4 intel reports
Filters
Last updated
All Time
Adversaries
1
1
1
1
1
CVEs
1
1
1
1
1
Malware / Tools
1
1
1
1
1
MITRE Techniques
2
2
2
1
1
Publisher
2
1
1
1
Veil#Drop Framework Delivers PureLog Stealer via Blogspot
The Veil#Drop framework utilizes a multi-stage infection chain involving JavaScript launchers and PowerShell cradles hosted on Blogspot to deploy PureLog Stealer in memory.
GreatXML Windows Zero-Day BitLocker Bypass
The GreatXML exploit by researcher Nightmare-Eclipse abuses the Windows Recovery Environment and Defender Offline Scan state to bypass BitLocker encryption using a malicious unattend.xml file.
SHEET#CREEP Campaign: APT36 Abuses Google Sheets API
The Pakistan-aligned APT36 is deploying a new variant of the SHEETCREEP RAT using Google Sheets for C2 communication, targeting Indian diplomatic interests.
EDRChoker Malware Uses QoS Throttling for Evasion
The EDRChoker tool abuses Windows Policy-Based Quality of Service (QoS) to starve security agents of bandwidth, causing them to silently time out without generating network block artifacts.