FAUTLReports

No Paste for You!

2026-03-31

Author: Patrick Wardle

file_types:so file_types:bash file_types:c platforms:windows file_types:xml file_types:swift platforms:macos architecture:arm64 debugger:lldb file_types:dylib

ClickFix: Stopped at ⌘+V

2026-02-15

Objective-See

Author: Patrick Wardle

malware_types:loader file_types:so platforms:windows platforms:macos file_types:zsh file_types:shortcut

Unmasking KorPlug: A Technical Breakdown - Part 2

2025-08-19

RevEng.AI

file_types:dll architecture:x86 file_types:pe malware_types:loader file_types:python file_types:c platforms:windows techniques:obfuscation techniques:side-loading techniques:code obfuscation

Unmasking KorPlug: A Technical Breakdown

2025-06-24

RevEng.AI

file_types:dll malware_types:rat file_types:dat file_types:pe file_types:exe malware_types:loader malware_types:trojan platforms:windows file_types:msi techniques:side-loading

Restoring Reflective Code Loading on macOS

2024-12-16

Objective-See

Author: Patrick Wardle

malware_types:fileless malware_types:loader file_types:so file_types:go techniques:encryption platforms:windows file_types:cpp platforms:macos file_types:mach-o file_types:dylib

AI Models for Decompiling Assembly Code

2024-11-16

RevEng.AI

file_types:so file_types:go file_types:c platforms:windows disassembler:ida pro disassembler:ghidra

BrazenBamboo Weaponizes FortiClient Vulnerability to Steal VPN Credentials via DEEPDATA

2024-11-15

VOLEXITY

Author: Callum Roxan, Charlie Gardner, Paul Rascagneres

platforms:windows malware_types:zero-day platforms:ios

Analysis of Evolving Evasion Tradecraft in Commodity Malware and Command-and-Control Frameworks

2024-09-05

RevEng.AI

file_types:dll techniques:system calls file_types:so malware_types:virus platforms:windows architecture:x64 techniques:hooking techniques:exfiltration

PhysMem(e): When Kernel Drivers Peek into Memory CVE-2024-41498

2024-09-05

RevEng.AI

file_types:pe file_types:so file_types:go file_types:c platforms:windows disassembler:ida pro debugger:windbg cve:cve-2024-41498

The Hidden Treasures of Crash Reports

2024-08-13

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:so file_types:c platforms:windows platforms:macos platforms:ios architecture:arm64

StormBamboo Compromises ISP to Abuse Insecure Software Update Mechanisms

2024-08-02

VOLEXITY

Author: Ankur Saini, Paul Rascagneres, Steven Adair, Thomas Lancaster

platforms:windows platforms:macos

From The DPRK With Love

2022-05-09

Objective-See

Author: Patrick Wardle

file_types:zip file_types:bin architecture:x86_64 file_types:so file_types:php file_types:javascript platforms:windows file_types:css file_types:json file_types:mach-o

Storm Cloud on the Horizon: GIMMICK Malware Strikes at macOS

2022-03-22

VOLEXITY

Author: Damien Cash, Steven Adair, Thomas Lancaster

platforms:windows platforms:macos

SysJoker, the first (macOS) malware of 2022!

2022-01-11

Objective-See

Author: Patrick Wardle

file_types:zip platforms:linux file_types:txt file_types:bin architecture:x86_64 file_types:sh file_types:so platforms:windows architecture:arm64 file_types:mach-o

Creating Shield

2021-03-10

Objective-See

Author: Csaba Fitzl

techniques:code injection file_types:so file_types:go file_types:c platforms:windows file_types:swift platforms:macos file_types:dylib file_types:objective-c

Property List Parsing Bug(s)

2020-10-21

Objective-See

Author: @OSCartography

file_types:so file_types:go platforms:windows file_types:xml platforms:macos platforms:ios debugger:lldb file_types:dylib file_types:objective-c disassembler:ghidra

Office Drama on macOS

2020-08-04

Objective-See

Author: Patrick Wardle

file_types:zip file_types:bin file_types:dat file_types:python file_types:so platforms:windows techniques:sandbox file_types:doc file_types:swift cve:cve-2019-1457

Tiny SHell Under the Microscope

2020-06-01

Objective-See

Author: Jaron Bradley

architecture:x86_64 file_types:python file_types:so file_types:go malware_types:backdoor platforms:windows platforms:macos file_types:mach-o disassembler:hopper

The Dacls RAT ...now on macOS!

2020-05-05

Objective-See

Author: Patrick Wardle

platforms:linux file_types:bin architecture:x86_64 file_types:so platforms:windows file_types:iso file_types:swift file_types:mach-o techniques:anti-disassembly cve:cve-2019-3396

Word to Your Mac

2018-12-05

Objective-See

file_types:bin file_types:python file_types:so malware_types:downloader platforms:windows techniques:sandbox file_types:xml file_types:doc platforms:macos file_types:dylib

Malware Analysis Reports