SuleramM

Malware Analyst @_CPResearch_

[SuleramM @MMarelus]

@hasherezade Nice work!

[Check Point Research @_CPResearch_]

0-Day Used by Lazarus in #DreamJob Campaign Against Defense Sector:

💥LPE vulnerability in Microsoft’s Afd.sys driver (CVE-2026-68820)
🧰New tools, including #Troy backdoor
🌍Compromised Roundcube servers (CVE-2025-49113) as infrastructure

Read More :
https://t.co/GDI2Ze7CRH

[Check Point Research @_CPResearch_]

Iranian threat actor #NimbusManticore rapidly developed its tooling, introducing the AI-assisted MiniFast backdoor and new delivery methods including trojanized software and SEO-poisoned sites.

Read More -->
https://t.co/hPjlKBFMFt

[Check Point Research @_CPResearch_]

🎯Yesterday, “Handala Hack,” operated by MOIS-affiliated threat actor, expanded its disruptive operations into the US

👁️ After years of tracking its activity, we’re sharing the latest and most common TTPs of to this actor: Void Manticore

Read More :
https://t.co/l4jNil9w1n

[Check Point Research @_CPResearch_]

#SilverDragon is a new threat cluster with ties to #APT41.

🎯Activity across Asia & Europe, exploiting internet-facing servers and running targeted phishing.

☁️New .NET implants alongside Cobalt Strike and abuse of cloud services for C2.

Read more ->
https://t.co/fv95Pwj6nt

[Check Point Research @_CPResearch_]

#APT29 (#CozyBear) is back — this time with a twist of 🍷
📨 Fake diplomat wine event invites
🎯 Targeting government entities across Europe
🧬 New custom loader we’re calling #Grapeloader along with a new variant of #Wineloader

Read more --> https://t.co/l7s871LX0j

[Check Point Research @_CPResearch_]

We introduce a new way to analyze V8 JavaScript Malware!🥳

In our latest publication we showcase:
🎩The ways threat actors abuse compiled JavaScript
🔬V8 JavaScript malware in the wild
⚒️A new tool for easy analysis: View8

Tool by @MMarelus
Read more:
https://t.co/vYZ0S1kxK7

[SuleramM @MMarelus]

Excited to announce the release of View8! 🎉
A new open-source tool for decompiling compiled V8 JavaScript. 🛠️
Along with that, I am sharing the research I did on the use of compiled JavaScript malware found in the wild. 🔒✨
https://t.co/na9sc59sdO
https://t.co/D4BZVzQQSX