2026-01-20 21:14 UTC
My latest blog post investigating a malware campaign which infects victims by utilizing only legitimate infrastructure. The malicious activity spans hundreds of hacked websites, the BSC blockchain, and a popular CDN.
https://expel.com/blog/clearfake-new-lotl-techniques/
Replies (1)
-
@da77a9@infosec.exchange 2026-01-21 17:09
@malwaretech so many any interesting things. The fact captchas have trained people to follow instructions to do arbitrary things.. The immutability of blockchain to keep a malicious resource around "forever". What a combination. There is one ray of hope in this - using google as an oracle for reversing truncated keccak hashes shows it still returns at least some unsponsored results.