https://tavares.re/tags/loader/ Recent content in loader on tavares.re https://tavares.re/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E https://tavares.re/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E Hugo -- gohugo.io en Fri, 14 Nov 2025 00:00:00 +0000 https://tavares.re/into-the-vo1d-hunting-a-botnet-hidden-in-tv-boxes/ Fri, 14 Nov 2025 00:00:00 +0000 https://tavares.re/into-the-vo1d-hunting-a-botnet-hidden-in-tv-boxes/ 'Into the Vo1d' is both a deep dive into a resilient IoT botnet and a broader lesson in threat hunting. https://tavares.re/hunting-privateloader-malware-behind-installskey-ppi-service/ Tue, 27 Feb 2024 00:00:00 +0000 https://tavares.re/hunting-privateloader-malware-behind-installskey-ppi-service/ This widespread malware had some important updates recently and has been infecting 5000 systems daily. https://tavares.re/unpacking-colibri-loader-russian-apt-linked-campaign/ Wed, 30 Nov 2022 00:00:00 +0000 https://tavares.re/unpacking-colibri-loader-russian-apt-linked-campaign/ Unpacking of a recent ColibriLoader campaign along with some YARA rules to detect it. https://tavares.re/tracking-privateloader-malware-distribution-service/ Wed, 31 Aug 2022 00:00:00 +0000 https://tavares.re/tracking-privateloader-malware-distribution-service/ We identified 30 malware families distributed by PrivateLoader. https://tavares.re/hunting-privateloader-pay-per-install-service/ Mon, 06 Jun 2022 00:00:00 +0000 https://tavares.re/hunting-privateloader-pay-per-install-service/ The malware's uncommon string decryption technique enable us to write a Yara rule for detection and hunting purposes.