Dwaine Evans

The rise of ransomware attacks has caused significant concerns for organizations worldwide. Among the notorious groups, the Royal ransomware group has emerged as a prominent threat actor, impacting over 350 global victims since September 2022. Their demands for hundreds of millions in ransom payments have put various industries on edge. In this article, we will delve into the workings of

A Middle Eastern advanced persistent threat (APT) group known as TA402 has recently launched a series of targeted cyber-espionage attacks. This group, also known as Molerats or Gaza Cybergang, has gained attention for its support of Palestinian intelligence gathering objectives. In their latest campaign, TA402 demonstrated new tactics, particularly the use of a new initial access downloader called IronWind. Background

In today’s digital landscape, scripting languages such as JScript, VBA, and Macro 4.0 have become vital tools for performing various tasks on Windows systems. However, these languages have also become a breeding ground for the rise of malware and malicious code. To effectively combat these threats, analysts need robust tools that can assist in the deobfuscation and analysis of scripts.