Skip to contentESC to close
·
/ to open
Malware
3
- Fake recruitment, remote JSON payloads, and function-inliner malware (analysis)
May 19, 2026
Clone-and-run recruitment lures that pull obfuscated Node.js from jsonkeeper-style hosts: IOCs, SHA-256 hashes, a small fetch script, function-inliner teardown, MITRE mappings with links, and what to do if you already ran the artifact.
12 minutes
- Malicious Code Loading via Base64 Encoded .dex File
Nov 10, 2025
Introduction In the course of analyzing a decompiled Java application, we encountered an unusual code segment that decodes a Base64 encoded …
2 minutes
- Analyzing KD Live Memory Dump with Volatility
May 1, 2024
Step 1: Identify the Memory Image NB: Volatility version 2
Ensure you have the memory dump file ready, potentially in a raw format or the …
2 minutes