MedusaHVNC Hijacks Browser Sessions on a Hidden Desktop
BlackFog analyzed MedusaHVNC, a Windows RAT that opens a browser on an…
MarkiRAT Malware Removal: Fake VPNs and svehost.exe
MarkiRAT hides in fake VPN and media-player installers. Check svehost.exe, BITS jobs,…
TrickBot Uses DNS Tunneling to Hide Windows C2 Traffic
A current TrickBot variant hides C2 data in DNS queries and persists…
Trojan:Win32/Commando.A!ml: What It Means and How to Stop Repeated Alerts
Trojan:Win32/Commando.A!ml can be malicious or a false positive. Check the PowerShell command,…
OTTERCOOKIE Malware Hides in SVG Files in Fake Coding Tests
Fake coding-test repositories hide OTTERCOOKIE fragments in SVG flags. Here is what…
Starland RAT Hides in Fake Zoom and WebEx Installers
Starland RAT hides in trojanized Zoom, WebEx, and other Windows installers. Check…
Win32:Trojan-gen Avast Detection: Malware or False Positive?
Win32:Trojan-gen is a generic Avast or AVG trojan verdict. Use the file…
Trojan:Win64/Lazy.PGLI!MTB: Meaning and Removal
Trojan:Win64/Lazy.PGLI!MTB keeps returning? Read the affected item, separate file, process, and history…
Trojan:Win32/BypassUAC!rfn: Meaning and Removal
Defender found Trojan:Win32/BypassUAC!rfn? Check the affected path, quarantine status, false-positive signals, recurring…
LabubaRAT Malware: Check and Remove the Fake NVIDIA RAT
LabubaRAT malware hides as nvidia-sysruntime.exe. Verify its signature and hash, remove autorun,…
MODBEACON RAT: Removal, Persistence, and Fake Installer Checks
MODBEACON RAT hides behind counterfeit installers and can persist through WMI, tasks,…
RedWing Android Spyware: Removal and Banking Safety Steps
RedWing Android spyware steals banking data through fake app-store pages and dangerous…