GitHub

zhuyue1314/the-backdoor-factory-1

###Hunt and backdoor: Injector | Windows Only The injector module will look for target executables to backdoor on disk. It will check to see if you have identified the target as a service, check to ...
GitHub

KoiDbg - Windows ARM64 Debugger for Reverse Engineering

To fully understand how KoiDbg works, read our published article. It is available in English and Portuguese: A debugger for Windows ARM64 (AARCH64), user-friendly for reverse engineers, malware ...
Bleeping Computer

Fake MAS Windows activation domain used to spread PowerShell malware

A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell scripts that infect Windows systems with the 'Cosmali Loader'.