Brian Stadnicki

https://brianstadnicki.github.io

Brian Stadnicki

Brian Stadnicki

Entries

  • Phishing with malicious iso files

    Phishing emails rely on many methods, such as sending exploit documents or executables. Thankfully, companies have fi...

  • Remcos RAT 3.4.0 protocol

    Remcos RAT is known for being very feature rich, with a lite version to test. They even provide an option to disable ...

  • AsyncRAT RCE vulnerability

    AsyncRAT is an open source RAT (Remote Access Tool). While it isn’t typically used for advanced attacks, it’s very co...

  • Jeemak 74R camera simple firmware extraction

    This cheap camera is quite terrible, so that’s why it’s been abandoned, ready for me to tinker with. To aid the tinke...

  • Chaos ransomware v4

    The chaos ransomware is fairly new, first appearing in June 2021 as a builder, offered on multiple darknet forums and...

  • Fantom ransomware

    6 years ago, kaspersky reported a piece of ransomware which displayed a fake windows update screen during encryption....

  • Overview of malware authors

    There is a huge amount of malware created and found every day, easily ranging from 1k to 3k every day just on a publi...

  • Gitlab RCE Stealth Shellbot

    Last year, a major RCE was found in GitLab, CVE-2021-22205, where GitLab versions >= 11.9 and <13.10.3 were affected ...

  • SBIDIOT IoT Malware: miner edition

    The SBIDIOT IoT malware was observed earlier this year in april. Recently I spotted a sample with a cryptominer added...

  • Face Brain: Password stealer with vm detection

    Today I’m taking a look at a password stealer filled with obfuscation and some virtual machine detection. The sample ...