An overview of the CVE as well as a list of software not previously mentioned in the NIST advisory.

How Stairwell users have insight into xz backdoor in their organizations, pIus IOCs & YARA rules.

Among rumors of an AnyDesk breach, we developed YARA rules and hunting methods to help customers.

A technical overview of VileRAT & the group thought to be behind it, as well as IoCs and more.

Research and an in-depth look at the double-edge swords that are digitally-signed certificates.

A detailed technical analysis of an obtained copy of Kuiper ransomware.

Using Stairwell's Variant Discovery tool to expand on threat research shared by ESET.

The Stairwell Threat Research team shares variants and queries for ShadowPad variant samples.

Stairwell researchers recovered a directory that had been publicly exposed. Here's what they found.

Details on previously unseen threats regarding Citrix CVE-2023-3519.

The first in a series detailing the capabilities of various tools in ChamelGang's arsenal.

An alert enrichment to the report created by CrowdStrike on Terminator.

The analysis of JasPer Loader, a trojanized Dynamic Link Library (DLL) file.

The release of an open-source Cobalt Strike stager decoder.

An analysis of Exmatter and a look at the potential future of the threat landscape.