Blog
Research and News from the RevEng.AI team
Latrodectus Affiliate Resumes Operations Using Brute Ratel C4 Post Operation Endgame
6/24/2024Executive Summary RevEng.AI observed a Latrodectus sample (a.k.a. Unidentified 111, Lotus, BLACKWIDOW, IceNova) delivery chain using a malicious JavaScript (JS) stager uploaded to a third-party public malware scanning service on 23 June 2024. Since early January until the present, RevEng.AI has observed versions 1.1 to 1.3 in operational use by the adversary (although earlier versions do exist, as documented by industry reporting [1]). Latrodectus is a loader typically delivered by phishing
Identifying x86_64 ELF Symbols in Stripped Binaries using AI
5/2/2022This blog post is the first in a new series that explains some of the new capabilities we are developing at RevEng.AI - starting with identifying symbols relative to known anchor points. What exactly does that mean?
← NewerPage 2 of 2