corpus.blog
41554 blogs · [ { "id": "01a0879e-e1dc-7113-8196-7906a1a82597", "title": "Investigating a Multi-Stage PowerShell Loader", "url": "https://malwr-analysis.com/2026/08/08/investigating-a-multi-stage-powershell-loader/", "published_at": "2026-08-08T17:41:53+00:00" }, { "id": "01a0879e-e1dc-7113-8196-7906a25e4b67", "title": "ClickFix Site Abusing Cloudflare Pages to Deliver Lumma Stealer", "url": "https://malwr-analysis.com/2026/05/26/clickfix-site-abusing-cloudflare-pages-to-deliver-lumma-stealer/", "published_at": "2026-05-26T07:40:31+00:00" }, { "id": "01a0879e-e1dc-7113-8196-7906a319e57d", "title": "Fake Microsoft Teams Download Page Delivers ClickFix Chrome Update Payload", "url": "https://malwr-analysis.com/2026/05/25/fake-microsoft-teams-download-page-delivers-clickfix-chrome-update-payload/", "published_at": "2026-05-24T19:04:35+00:00" }, { "id": "01a0879e-e1dc-7113-8196-7906a347f916", "title": "Ongoing Phishing Campaign Abusing Google Cloud Storage to Redirect Users to Multiple Scam Pages", "url": "https://malwr-analysis.com/2026/03/14/ongoing-phishing-campaign-abusing-google-cloud-storage-to-redirect-users-to-multiple-scam-pages/", "published_at": "2026-03-13T21:23:00+00:00" }, { "id": "01a0879e-e1dc-7113-8196-7906a3b096ba", "title": "Analysis of an Integrated Phishing Campaign Utilizing Google Cloud Infrastructure", "url": "https://malwr-analysis.com/2026/03/03/analysis-of-an-integrated-phishing-campaign-utilizing-google-cloud-infrastructure/", "published_at": "2026-03-03T15:56:32+00:00" }, { "id": "01a0879e-e1dc-7113-8196-7906a3e72e11", "title": "Yoroi Wallet Phishing Abuses GoTo Resolve and ScreenConnect for Device Takeover", "url": "https://malwr-analysis.com/2026/03/02/yoroi-wallet-phishing-abuses-goto-resolve-and-screenconnect-for-device-takeover/", "published_at": "2026-03-01T19:28:29+00:00" }, { "id": "01a0879e-e1dc-7113-8196-7906a469684f", "title": "Crypto Compensation Scam: Fake BTC Payout Lure Abusing Survey & Payment Flows", "url": "https://malwr-analysis.com/2026/02/22/crypto-compensation-scam-fake-btc-payout-lure-abusing-survey-payment-flows/", "published_at": "2026-02-21T19:42:45+00:00" }, { "id": "01a0879e-e1dc-7113-8196-7906a4870af5", "title": "Kraken Darknet Access via Clearnet Gateways", "url": "https://malwr-analysis.com/2026/02/18/kraken-darknet-access-via-clearnet-gateways/", "published_at": "2026-02-17T19:23:48+00:00" }, { "id": "01a0879e-e1dc-7113-8196-7906a5198189", "title": "Cloudflare Pages “Continue Read” Redirect Kit Abused for Phishing, Adware, and Malware Delivery", "url": "https://malwr-analysis.com/2026/02/15/cloudflare-pages-continue-read-redirect-kit-abused-for-phishing-adware-and-malware-delivery/", "published_at": "2026-02-14T19:15:50+00:00" }, { "id": "01a0879e-e1dc-7113-8196-7906a5b751a1", "title": "Tycoon 2FA Campaign Abusing *.contractors Domains for Gmail and Microsoft 365 Credential Harvesting", "url": "https://malwr-analysis.com/2026/01/29/tycoon-2fa-campaign-abusing-contractors-domains-for-gmail-and-microsoft-365-credential-harvesting/", "published_at": "2026-01-28T23:12:07+00:00" }, { "id": "01a0bb51-64f4-70e5-b996-0bcbd6fcef11", "title": "Fake “PNB MetLife Payment Gateway” Page Stealing Customer Details and Redirecting Victims to UPI Payments", "url": "https://malwr-analysis.com/2026/01/21/fake-pnb-metlife-payment-gateway-page-stealing-customer-details-and-redirecting-victims-to-upi-payments/", "published_at": "2026-01-21T06:06:00+00:00" }, { "id": "01a0bb51-64f4-70e5-b996-0bcbd71dfab1", "title": "Fake “Fast Ray VPN” Site on Cloudflare Pages Leading to PUA Downloads", "url": "https://malwr-analysis.com/2026/01/11/fake-fast-ray-vpn-site-on-cloudflare-pages-leading-to-pua-downloads/", "published_at": "2026-01-11T09:40:37+00:00" }, { "id": "01a0bb51-64f4-70e5-b996-0bcbd7294f1f", "title": "Fake Windows Update and BSOD Alerts Used in a Tech Support Scam", "url": "https://malwr-analysis.com/2026/01/09/fake-windows-update-and-bsod-alerts-used-in-a-tech-support-scam/", "published_at": "2026-01-08T21:47:03+00:00" }, { "id": "01a0bb51-64f4-70e5-b996-0bcbd757aa20", "title": "How Scareware Emails Now Push Legitimate Subscriptions", "url": "https://malwr-analysis.com/2026/01/08/how-scareware-emails-now-push-legitimate-subscriptions/", "published_at": "2026-01-07T19:49:24+00:00" }, { "id": "01a0bb51-64f4-70e5-b996-0bcbd7608309", "title": "Analysis of a Fake Cloudflare Turnstile Used as a Traffic Filtering Gate", "url": "https://malwr-analysis.com/2026/01/07/analysis-of-a-fake-cloudflare-turnstile-used-as-a-traffic-filtering-gate/", "published_at": "2026-01-06T22:33:49+00:00" }, { "id": "01a0bb51-64f4-70e5-b996-0bcbd794c98c", "title": "Large-Scale Parasite SEO Campaign Using Amazon Style Pages on Cloudflare Pages", "url": "https://malwr-analysis.com/2026/01/05/large-scale-parasite-seo-campaign-using-amazon-style-pages-on-cloudflare-pages/", "published_at": "2026-01-05T16:42:11+00:00" }, { "id": "01a0bb51-64f4-70e5-b996-0bcbd84cf642", "title": "Fake WordPress Domain Renewal Phishing Email Stealing Credit Card And 3-D Secure OTP", "url": "https://malwr-analysis.com/2025/12/31/fake-wordpress-domain-renewal-phishing-email-stealing-credit-card-and-3-d-secure-otp/", "published_at": "2025-12-31T13:03:16+00:00" }, { "id": "01a0bb51-64f4-70e5-b996-0bcbd902bede", "title": "RMM Abuse in a Crypto Wallet Distribution Campaign", "url": "https://malwr-analysis.com/2025/12/31/rmm-abuse-in-a-crypto-wallet-distribution-campaign/", "published_at": "2025-12-30T20:42:30+00:00" }, { "id": "01a0bb51-64f4-70e5-b996-0bcbd977f469", "title": "Fake “Stable Genesis Airdrop” Campaign Delivering a Crypto Wallet Drainer via Phishing", "url": "https://malwr-analysis.com/2025/12/23/fake-stable-genesis-airdrop-campaign-delivering-a-crypto-wallet-drainer-via-phishing/", "published_at": "2025-12-23T17:14:33+00:00" }, { "id": "01a0bb51-64f4-70e5-b996-0bcbda280ca9", "title": "Crimson RAT Delivered via Malicious Excel", "url": "https://malwr-analysis.com/2025/12/23/crimson-rat-delivered-via-malicious-excel/", "published_at": "2025-12-22T21:33:39+00:00" }, { "id": "01a0bb59-6964-7346-bb96-375a04510a2e", "title": "Phishing Emails Are Now Aimed at Users and AI Defenses", "url": "https://malwr-analysis.com/2025/08/24/phishing-emails-are-now-aimed-at-users-and-ai-defenses/", "published_at": "2025-08-23T20:12:57+00:00" }, { "id": "01a0bb59-6964-7346-bb96-375a04a565ed", "title": "Watch Out for This Gmail Scam", "url": "https://malwr-analysis.com/2025/08/16/watch-out-for-this-gmail-scam/", "published_at": "2025-08-16T07:20:39+00:00" }, { "id": "01a0bb59-6964-7346-bb96-375a053878cc", "title": "Arechclient2 Malware Analysis (sectopRAT)", "url": "https://malwr-analysis.com/2025/02/18/arechclient2-malware-analysis-sectoprat/", "published_at": "2025-02-18T08:16:36+00:00" }, { "id": "01a0bb59-6964-7346-bb96-375a054aa491", "title": "NanoCore RAT Malware Analysis", "url": "https://malwr-analysis.com/2025/02/10/nanocore-rat-malware-analysis/", "published_at": "2025-02-09T18:54:37+00:00" }, { "id": "01a0bb59-6964-7346-bb96-375a055f43cb", "title": "Fake SBI Reward APK Targets Victims with Trojan via WhatsApp", "url": "https://malwr-analysis.com/2025/01/20/fake-sbi-reward-apk-targets-victims-with-trojan-via-whatsapp/", "published_at": "2025-01-20T09:51:38+00:00" }, { "id": "01a0bb59-6964-7346-bb96-375a05abaff3", "title": "Beware of “Your Account Has Been Hacked. You need to unlock” Scam Emails: Stay Safe Online", "url": "https://malwr-analysis.com/2024/12/05/beware-of-your-account-has-been-hacked-you-need-to-unlock-scam-emails-stay-safe-online/", "published_at": "2024-12-05T11:12:18+00:00" }, { "id": "01a0bb59-6964-7346-bb96-375a05b66163", "title": "Understanding and Identifying a Common Phishing Scam: “Your Device is Hacked”", "url": "https://malwr-analysis.com/2024/11/13/understanding-and-identifying-a-common-phishing-scam-your-device-is-hacked/", "published_at": "2024-11-13T13:33:34+00:00" }, { "id": "01a0bb59-6964-7346-bb96-375a06b07c46", "title": "Beware of the “India Post 170th Anniversary” WhatsApp Scam", "url": "https://malwr-analysis.com/2024/11/11/beware-of-the-india-post-170th-anniversary-whatsapp-scam/", "published_at": "2024-11-10T20:03:58+00:00" }, { "id": "01a0bb59-6964-7346-bb96-375a0754b05a", "title": "Instagram Phishing Email: We detected a new login into your Instagram account", "url": "https://malwr-analysis.com/2024/10/04/instagram-phishing-email-we-detected-a-new-login-into-your-instagram-account/", "published_at": "2024-10-03T22:20:40+00:00" }, { "id": "01a0bb59-6964-7346-bb96-375a07fccc8c", "title": "Beware of Phishing Emails: “Hey, You Have a Problem” Scam", "url": "https://malwr-analysis.com/2024/08/24/beware-of-phishing-emails-hey-you-have-a-problem-scam/", "published_at": "2024-08-24T07:37:13+00:00" }, { "id": "01a0bb61-9126-7202-946b-81529c79aae9", "title": "Understanding RedLine Stealer: The Trojan Targeting Your Data", "url": "https://malwr-analysis.com/2024/08/22/understanding-redline-stealer-the-trojan-targeting-your-data/", "published_at": "2024-08-21T17:57:59+00:00" }, { "id": "01a0bb61-9126-7202-946b-81529cd44c85", "title": "Phishing email impersonating as CEO of Indian Cyber Crime Coordination Centre (I4C)", "url": "https://malwr-analysis.com/2024/05/21/phishing-email-impersonating-as-ceo-of-indian-cyber-crime-coordination-centre-i4c/", "published_at": "2024-05-20T17:28:23+00:00" }, { "id": "01a0bb61-9126-7202-946b-81529da1dae9", "title": "Phishing/Sextortion Email – For your own safety, I highly recommend reading this email", "url": "https://malwr-analysis.com/2024/03/29/phishing-sextortion-email-for-your-own-safety-i-highly-recommend-reading-this-email/", "published_at": "2024-03-29T11:06:14+00:00" }, { "id": "01a0bb61-9126-7202-946b-81529dff5928", "title": "Malicious email .ics attachments", "url": "https://malwr-analysis.com/2024/03/25/malicious-email-ics-attachments/", "published_at": "2024-03-24T16:15:22+00:00" }, { "id": "01a0bb61-9126-7202-946b-81529ef82ef9", "title": "MS Excel Malware Analysis", "url": "https://malwr-analysis.com/2021/08/13/ms-excel-malware-analysis/", "published_at": "2021-08-13T13:11:55+00:00" }, { "id": "01a0bb61-9126-7202-946b-81529f2b2af9", "title": "Word Document Malware Analysis", "url": "https://malwr-analysis.com/2020/09/07/word-document-malware-analysis/", "published_at": "2020-09-06T17:21:01+00:00" }, { "id": "01a0bb61-9126-7202-946b-81529f98d080", "title": "Crimson RAT Malware Analysis", "url": "https://malwr-analysis.com/2020/07/24/crimson-rat-malware-analysis/", "published_at": "2020-07-24T12:34:43+00:00" }, { "id": "01a0bb61-9126-7202-946b-81529fdd57b6", "title": "Word Macro Drops IcedID Trojan – Malware Analysis", "url": "https://malwr-analysis.com/2020/07/12/word-macro-drops-icedid-trojan-malware-analysis/", "published_at": "2020-07-12T10:02:30+00:00" }, { "id": "01a0bb61-9126-7202-946b-8152a07dea64", "title": "njRAT Malware Analysis", "url": "https://malwr-analysis.com/2020/06/21/njrat-malware-analysis/", "published_at": "2020-06-20T18:43:26+00:00" }, { "id": "01a0bb61-9126-7202-946b-8152a08024ec", "title": "Word Macro Malware Analysis", "url": "https://malwr-analysis.com/2020/06/12/word-macro-malware-analysis-2/", "published_at": "2020-06-11T19:15:57+00:00" }, { "id": "01a0bb67-d726-7376-b303-5ce834f76063", "title": "Word Macro Malware Analysis", "url": "https://malwr-analysis.com/2020/05/15/word-macro-malware-analysis/", "published_at": "2020-05-14T18:39:12+00:00" }, { "id": "01a0bb67-d726-7376-b303-5ce8354345eb", "title": "Excel 4.0 macro Trojan Downloader – Malware Analysis", "url": "https://malwr-analysis.com/2020/05/04/excel-4-0-macro-trojan-downloader-malware-analysis/", "published_at": "2020-05-04T09:33:40+00:00" }, { "id": "01a0bb67-d726-7376-b303-5ce835d56443", "title": "PDF malware analysis", "url": "https://malwr-analysis.com/2020/05/01/pdf-malware-analysis/", "published_at": "2020-05-01T10:16:55+00:00" }, { "id": "01a0bb67-d726-7376-b303-5ce8363d8752", "title": "Trojan Agent Tesla – Malware Analysis", "url": "https://malwr-analysis.com/2020/04/05/trojan-agent-tesla-malware-analysis/", "published_at": "2020-04-05T09:38:03+00:00" }, { "id": "01a0bb67-d726-7376-b303-5ce836fd18c4", "title": "Password stealer Trojan – Malware Analysis", "url": "https://malwr-analysis.com/2020/03/28/password-stealer-trojan-malware-analysis/", "published_at": "2020-03-28T09:36:06+00:00" }, { "id": "01a0bb67-d726-7376-b303-5ce8371aa4da", "title": "Trojan dropper bdf243b7a296f7aecc366c799e3fb865e 3aff7c72d8d942e2b2632a347fe5c3", "url": "https://malwr-analysis.com/2019/08/23/trojan-dropper-bdf243b7a296f7aecc366c799e3fb865ee3aff7c72d8d942e2b2632a347fe5c3/", "published_at": "2019-08-22T17:00:43+00:00" }, { "id": "01a0bb67-d726-7376-b303-5ce837410384", "title": "Trojan downloader word macro", "url": "https://malwr-analysis.com/2019/05/14/trojan-downloader-word-macro/", "published_at": "2019-05-13T17:35:33+00:00" }, { "id": "01a0bb67-d726-7376-b303-5ce837baec3d", "title": "Word macro drops Emotet malware", "url": "https://malwr-analysis.com/2019/05/04/word-macro-drops-emotet-malware/", "published_at": "2019-05-04T11:17:33+00:00" }, { "id": "01a0bb67-d726-7376-b303-5ce8384e77d7", "title": "Trojan- JS downloader", "url": "https://malwr-analysis.com/2019/04/22/trojan-js-downloader/", "published_at": "2019-04-21T18:41:34+00:00" }, { "id": "01a0bb67-d726-7376-b303-5ce8387bd629", "title": "Word Macro backdoor Trojan", "url": "https://malwr-analysis.com/2019/04/16/word-macro-backdoor-trojan/", "published_at": "2019-04-16T06:26:21+00:00" }, { "id": "01a0bb6c-02df-705b-8f94-867428ab0b85", "title": "Trojan malware – Microsoft Shortcut (LNK)", "url": "https://malwr-analysis.com/2019/04/14/trojan-malware-microsoft-shortcut-lnk/", "published_at": "2019-04-13T16:05:30+00:00" }, { "id": "01a0bb6c-02df-705b-8f94-867429970908", "title": "Microsoft Shortcut (LNK) trojan malware", "url": "https://malwr-analysis.com/2019/03/27/microsoft-shortcut-lnk-trojan-malware/", "published_at": "2019-03-26T17:15:19+00:00" }, { "id": "01a0bb6c-02df-705b-8f94-86742a45fc81", "title": "Emotet malware analysis", "url": "https://malwr-analysis.com/2019/03/16/emotet-malware-analysis/", "published_at": "2019-03-15T20:07:38+00:00" }, { "id": "01a0bb6c-02df-705b-8f94-86742a46f960", "title": "Microsoft word document malware analysis", "url": "https://malwr-analysis.com/2019/02/16/microsoft-word-document-malware-analysis/", "published_at": "2019-02-16T09:37:14+00:00" } ] posts Claim your blog
Back to malwr-analysis.com
Blog · corpus.blog/blogs/malwr-analysis.com/posts

malwr-analysis.com

malwr-analysis.com

2026

Investigating a Multi-Stage PowerShell Loaderoriginal ↗
8 Aug 2026
ClickFix Site Abusing Cloudflare Pages to Deliver Lumma Stealeroriginal ↗
26 May 2026
Fake Microsoft Teams Download Page Delivers ClickFix Chrome Update Payloadoriginal ↗
24 May 2026
Ongoing Phishing Campaign Abusing Google Cloud Storage to Redirect Users to Multiple Scam Pagesoriginal ↗
13 Mar 2026
Analysis of an Integrated Phishing Campaign Utilizing Google Cloud Infrastructureoriginal ↗
3 Mar 2026
Yoroi Wallet Phishing Abuses GoTo Resolve and ScreenConnect for Device Takeoveroriginal ↗
1 Mar 2026
Crypto Compensation Scam: Fake BTC Payout Lure Abusing Survey & Payment Flowsoriginal ↗
21 Feb 2026
Kraken Darknet Access via Clearnet Gatewaysoriginal ↗
17 Feb 2026
Cloudflare Pages “Continue Read” Redirect Kit Abused for Phishing, Adware, and Malware Deliveryoriginal ↗
14 Feb 2026
Tycoon 2FA Campaign Abusing *.contractors Domains for Gmail and Microsoft 365 Credential Harvestingoriginal ↗
28 Jan 2026
Fake “PNB MetLife Payment Gateway” Page Stealing Customer Details and Redirecting Victims to UPI Paymentsoriginal ↗
21 Jan 2026
Fake “Fast Ray VPN” Site on Cloudflare Pages Leading to PUA Downloadsoriginal ↗
11 Jan 2026
Fake Windows Update and BSOD Alerts Used in a Tech Support Scamoriginal ↗
8 Jan 2026
How Scareware Emails Now Push Legitimate Subscriptionsoriginal ↗
7 Jan 2026
Analysis of a Fake Cloudflare Turnstile Used as a Traffic Filtering Gateoriginal ↗
6 Jan 2026
Large-Scale Parasite SEO Campaign Using Amazon Style Pages on Cloudflare Pagesoriginal ↗
5 Jan 2026

2025

Fake WordPress Domain Renewal Phishing Email Stealing Credit Card And 3-D Secure OTPoriginal ↗
31 Dec 2025
RMM Abuse in a Crypto Wallet Distribution Campaignoriginal ↗
30 Dec 2025
Fake “Stable Genesis Airdrop” Campaign Delivering a Crypto Wallet Drainer via Phishingoriginal ↗
23 Dec 2025
Crimson RAT Delivered via Malicious Exceloriginal ↗
22 Dec 2025
Phishing Emails Are Now Aimed at Users and AI Defensesoriginal ↗
23 Aug 2025
Watch Out for This Gmail Scamoriginal ↗
16 Aug 2025
Arechclient2 Malware Analysis (sectopRAT)original ↗
18 Feb 2025
NanoCore RAT Malware Analysisoriginal ↗
9 Feb 2025
Fake SBI Reward APK Targets Victims with Trojan via WhatsApporiginal ↗
20 Jan 2025

2024

Beware of “Your Account Has Been Hacked. You need to unlock” Scam Emails: Stay Safe Onlineoriginal ↗
5 Dec 2024
Understanding and Identifying a Common Phishing Scam: “Your Device is Hacked”original ↗
13 Nov 2024
Beware of the “India Post 170th Anniversary” WhatsApp Scamoriginal ↗
10 Nov 2024
Instagram Phishing Email: We detected a new login into your Instagram accountoriginal ↗
3 Oct 2024
Beware of Phishing Emails: “Hey, You Have a Problem” Scamoriginal ↗
24 Aug 2024
Understanding RedLine Stealer: The Trojan Targeting Your Dataoriginal ↗
21 Aug 2024
Phishing email impersonating as CEO of Indian Cyber Crime Coordination Centre (I4C)original ↗
20 May 2024
Phishing/Sextortion Email – For your own safety, I highly recommend reading this emailoriginal ↗
29 Mar 2024
Malicious email .ics attachmentsoriginal ↗
24 Mar 2024

2021

MS Excel Malware Analysisoriginal ↗
13 Aug 2021

2020

Word Document Malware Analysisoriginal ↗
6 Sept 2020
Crimson RAT Malware Analysisoriginal ↗
24 Jul 2020
Word Macro Drops IcedID Trojan – Malware Analysisoriginal ↗
12 Jul 2020
njRAT Malware Analysisoriginal ↗
20 Jun 2020
Word Macro Malware Analysisoriginal ↗
11 Jun 2020
Word Macro Malware Analysisoriginal ↗
14 May 2020
Excel 4.0 macro Trojan Downloader – Malware Analysisoriginal ↗
4 May 2020
PDF malware analysisoriginal ↗
1 May 2020
Trojan Agent Tesla – Malware Analysisoriginal ↗
5 Apr 2020
Password stealer Trojan – Malware Analysisoriginal ↗
28 Mar 2020

2019

Trojan dropper bdf243b7a296f7aecc366c799e3fb865e 3aff7c72d8d942e2b2632a347fe5c3original ↗
22 Aug 2019
Trojan downloader word macrooriginal ↗
13 May 2019
Word macro drops Emotet malwareoriginal ↗
4 May 2019
Trojan- JS downloaderoriginal ↗
21 Apr 2019
Word Macro backdoor Trojanoriginal ↗
16 Apr 2019
Trojan malware – Microsoft Shortcut (LNK)original ↗
13 Apr 2019
Microsoft Shortcut (LNK) trojan malwareoriginal ↗
26 Mar 2019
Emotet malware analysisoriginal ↗
15 Mar 2019
Microsoft word document malware analysisoriginal ↗
16 Feb 2019