Click here to download all references as Bib-File.•
| 2026-07-17
⋅
Elastic
⋅
New North Korean campaign uses fake coding interviews to steal developer credentials OtterCookie |
| 2025-11-05
⋅
nviso
⋅
Decoding VShell: Insights into a Chinese-Language Cyber Espionage Tool VShell |
| 2025-06-25
⋅
cocomelonc
⋅
MacOS hacking part 3: shellcoding. x86_64 assembly intro. Simple NASM examples |
| 2025-04-28
⋅
Netresec
⋅
Decoding njRAT traffic with NetworkMiner NjRAT |
| 2025-04-14
⋅
Palo Alto Networks Unit 42
⋅
Slow Pisces Targets Developers With Coding Challenges and Introduces New Customized Python Malware RN Stealer |
| 2025-04-04
⋅
Cyber and Ramen
⋅
OtterCookie Expands Targeting to AI Coding Tools: Analysis of a Trojanized npm Campaign OtterCookie |
| 2025-03-13
⋅
Medium walmartglobaltech
⋅
ArechClient; Decoding IOCs and finding the onboard browser extension SectopRAT |
| 2024-12-19
⋅
Medium walmartglobaltech
⋅
Decoding RevC2 strings RevC2 |
| 2024-09-10
⋅
ReversingLabs
⋅
Fake recruiter coding tests target devs with malicious Python packages |
| 2024-08-22
⋅
Mandiant
⋅
PEAKLIGHT: Decoding the Stealthy Memory-Only Malware CryptBot Emmenhtal HijackLoader Lumma Stealer |
| 2024-08-04
⋅
Twitter (@embee_research)
⋅
Decoding a Cobalt Strike Downloader Script With CyberChef Cobalt Strike |
| 2024-05-30
⋅
Trend Micro
⋅
Decoding Water Sigbin's Latest Obfuscation Tricks Water Sigbin |
| 2024-05-21
⋅
Twitter (@embee_research)
⋅
Tweets on decoding a Latrodectus loader Latrodectus |
| 2024-02-26
⋅
SpyCloud
⋅
“Pantsless Data”: Decoding Chinese Cybercrime TTPs |
| 2024-02-20
⋅
YouTube (Embee Research)
⋅
StealC Loader Analysis - Decoding Powershell Malware With CyberChef Stealc |
| 2024-02-09
⋅
YouTube (Embee Research)
⋅
Guloader Decoding With Cyberchef CloudEyE |
| 2024-02-08
⋅
YouTube (Embee Research)
⋅
Cobalt Strike Decoding and C2 Extraction - 3 Minute Malware Analysis Speedrun Cobalt Strike |
| 2024-02-02
⋅
The Cyber Express
⋅
Decoding KillNet 2.0 and Sylhet Gang-SG Cyberattack Plans for 2024 SYLHET GANG-SG |
| 2024-01-21
⋅
YouTube (Embee Research)
⋅
Manual Malware Decoding With Procmon - Pikabot Pikabot |
| 2024-01-18
⋅
Kroll
⋅
Open the DARKGATE – Brute Forcing DARKGATE Encodings DarkGate |