Malware Analysis Solutions @threatzone_ → https://xitter.cf/t.co/j39q28ZDqw: https://xitter.cf/t.co/wUVNwSLUh7 → HookMesh: https://xitter.cf/t.co/sxf1qitU4m
Joined June 2020
- Tweets141
- Following3
- Followers1.1K
- Likes44
Our research team analyzed SilentNET, a Java-based infostealer sold as a service and spread through trojanized Minecraft mods and malicious ads. It reads its C2 address from a Polygon smart contract (EtherHiding) and resolves hostnames over DNS-over-HTTPS.
Key takeaway: the loader had 0/64 detections on VirusTotal, while @threatzone_ flagged it as Malicious (91/100) based on behavior. It swept credentials and cookies from Chrome, Edge and Firefox, plus crypto wallets and FileZilla data, in about two seconds. Stolen session cookies can be used to bypass MFA.
This case again shows why real dynamic analysis is crucial for SOC teams.
malwation.com/blog/inside-si…
Mail, file shares, upload forms. Malwation meets every file in the corridor, before it meets anyone else.
Our new website shows how.
malwation.com
Malwation retweeted
In recent weeks, our research team’ve identified a sophisticated phishing campaign targeting Türkiye. Threat actors targeted computers running Windows operating systems located in Türkiye and using the Turkish language.
Key takeaway: the malware bypassed every public sandbox and AV aside from Threat.Zone, and also evaded EDR/XDR in real-world incidents. We noted impact across many banks, ISPs, and mid-level organizations.
This case again shows why on-premises sandboxes are essential for critical infrastructure and why real dynamic analysis is crucial for SOC teams.
malwation.com/blog/technical…
In recent weeks, our research team’ve identified a sophisticated phishing campaign targeting Türkiye. Threat actors targeted computers running Windows operating systems located in Türkiye and using the Turkish language.
Key takeaway: the malware bypassed every public sandbox and AV aside from Threat.Zone, and also evaded EDR/XDR in real-world incidents. We noted impact across many banks, ISPs, and mid-level organizations.
This case again shows why on-premises sandboxes are essential for critical infrastructure and why real dynamic analysis is crucial for SOC teams.
malwation.com/blog/technical…
Malwation retweeted
AGENTIC MALWARE ANALYSIS?
After years of building ThreatZone's holistic malware analysis platform, we've taken our deep domain expertise into the AI realm.
Today, we're revealing our next breakthrough - a platform that fundamentally changes how malware analysis works.
Our Agentic AI Platform leverages years of real-world threat intelligence and advanced sandbox technologies to create domain expert AI agents that don't just analyze - they understand context, adapt methodologies, and make intelligent decisions.
This isn't generic AI applied to cybersecurity. These agents possess deep malware analysis expertise, understand attack vectors, and can adapt their analysis strategies based on threat characteristics.
We're opening our waitlist for senior security engineers and malware researchers who want to be among the first to experience domain-specific agentic AI:
agentic.threat.zone
Malwation retweeted
Ready to outsmart the most sophisticated malware? Join our webinar to explore Threat.Zone’s stealth hypervisor technology—designed to detect and analyze complex threats while overcoming anti-VM and anti-sandbox techniques.
Discover why these methods are crucial in staying one step ahead of cybercriminals.
Save your spot now: us06web.zoom.us/webinar/regi…
#ThreatZone #MalwareAnalysis #StealthHypervisor #CyberSecurity #AntiVM #AntiSandbox #Webinar
Malwation retweeted
Malware never sees the trick. 🎩✨
At Threat.Zone, our custom hypervisor patches outsmarts every anti-VM and anti-sandbox technique, unveiling the true behavior of complex malware with precision.
Ready to witness the ultimate illusion?
Try now app.threat.zone
#ThreatZone #CyberSecurity #MalwareAnalysis #HypervisorMagic #MalwareSandbox
Technical Analysis of TUSAŞ-Impersonating Phishing Campaigns Delivering Snake Keylogger
Our team has uncovered a sophisticated phishing campaign where threat actors impersonate TUSAŞ (Turkish Aerospace Industries) to distribute the Snake Keylogger via malicious emails. The malware employs PowerShell evasion, scheduled tasks for persistence, and steals sensitive data from browsers and email clients.
Authored by Utku Çorbacı(@rhotav) from our team, the technical analysis is available on Malwation:
malwation.com/blog/technical…
Malwation retweeted
🚨 New Feature Alert: Syscalls on Threat.Zone! 🚨
Introducing Syscalls, a game-changing feature for granular malware analysis.
Check out our latest blog post for all the details 👉 malwation.com/blog/introduci…
#MalwareAnalysis #Syscalls #ThreatZone #Malwation
Malwation retweeted
Back to work after the holidays?
Some are struggling to remember how to do their jobs, while others... never stopped working. Threats didn't take holidays, so as us, cybersec fellas!
👉 Stay prepared. Stay protected. Stay in Threat.Zone.
#threatzone #malwation
Malwation retweeted
Be smarter with Threat.Zone-Holistic Malware Analysis Platform.
⏳ Last 7 Days to Catch the BIGGEST DISCOUNT of the YEAR!
Act now before it's gone.
Claim 35% off using "HAPPYHOLIDAYS35" in the checkout: app.threat.zone/pricing
#threatzone #malwareanalysis #cybersecuritymemes
Malwation retweeted
💻 What is happening with Agent Tesla?
Malwation Threat Research (MTR) team has done comprehensive research and broken it down for you - where it started, how it works, and why it is such a threat.
Read the full story 👉malwation.com/blog/origins-o…
#agenttesla #originlogger #malware
🎄 Holiday vibes for everyone! …except cybersecurity experts. 💻💔
The struggle is real and we feel you! To all the tireless defenders out there 🫡, keeping their organizations and users safe, even when everyone else is on their break. 🥂
#cybersecduringholidays #holidayseason #workingonholidays
🚨 New Blog Alert! 🚨
Is CDR a nice-to-have or a must-have in your security strategy? 🤔
What are the consequences of not utilizing CDR?
Learn all of it and more in our new blog post 👉 malwation.com/blog/content-d…
#contentdisarmandreconstrucion #cdr #malwation #hookmesh
