@k0ck4
Here's a fun one from our latest research:View quoted post on X
PHANTOMPULSE resolves its C2 from blockchain transactions. The malware reads the most recent transaction of a wallet to decrypt the input data, and uses it as the C2 URL.
The problem? It doesn't verify the sender. 🧵
research.checkpoint.com Drawn to Danger: Windows Graphics Vulnerabilities Lead to Remote Code Execution and Memory Exposure... Background Check Point Research (CPR) identified three security vulnerabilities in the Graphics Device Interface (GDI) in Windows. We promptly reported these issues to Microsoft, and they were... Evading Elastic EDR's call stack signatures with call gadgets - Almond Offensive Security Blog - offsec.almond.consulting/evading-elasti…View quoted post on X
