Tofsee Botnet: Proxying and Mining
Investigating the proxying, spam, and cryptocurrency-mining activity of the modular Tofsee botnet.
Botnet
Tracking PrivateLoader: Malware Distribution Service
Tracking PrivateLoader delivery chains and identifying 30 malware families in the collected payloads.
FluBot Persists: Infecting Europe and Australia
A historical investigation of FluBot distribution, infection telemetry, and its domain-generation algorithm.
Backdoors Pre-Installed on Cheap Android Devices
Sinkhole observations of pre-installed Android threats and insecure device-update mechanisms.
Fraudulent Ads SDK Installed on 15 Million Android Devices
An Android advertising SDK investigation, with a historical appendix of sample hashes, package names, and domains.