Yet Another NodeJS Backdoor (YaNB): A Modern Challenge

April 29, 2025 | Reegun Jayapaul

Hunter

Resurgence of a Fake Captcha Malware Campaign

March 12, 2025 | Reegun Jayapaul

During an Advanced Continual Threat Hunt (ACTH) investigation in early February ...

Resurgence of BlackCat Ransomware

March 06, 2024 | Reegun Jayapaul

Updated March 8: Based on our experience, we believe that BlackCat's claim of ...

OneNote Spear-Phishing Campaign

March 09, 2023 | Reegun Jayapaul

Trustwave SpiderLabs “noted” in Part 1 and Part 2 of our OneNote research that ...

CVE-2020-0696 - Microsoft Outlook Security Feature Bypass Vulnerability

January 27, 2022 | Reegun Jayapaul

Summary: During an investigation of a malware campaign, I discovered that ...

Trustwave Threat Hunting Guide: Identifying PwnKit (CVE-2021-4034) Exploitation

January 26, 2022 | Reegun Jayapaul

The Trustwave Threat Hunting team has authored a practical guide to help the ...

Telegram Self-Destruct? Not Always

August 05, 2021 | Reegun Jayapaul

Summary Secret-Chats in Telegram use end-to-end encryption, which is meant for ...

Microsoft Teams and Skype Logging Privacy Issue

January 11, 2021 | Reegun Jayapaul

Description: This blog post focuses on the privacy issues that Microsoft Teams ...

GoldenSpy Chapter 5 : Multiple GoldenSpy Uninstaller Variants Discovered

October 22, 2020 | Reegun Jayapaul

Summary: Trustwave identified a significant malicious campaign on mandatory tax ...

Microsoft Teams Updater Living off the Land

August 05, 2020 | Reegun Jayapaul

Introduction During this global pandemic COVID-19 situation, there has been an ...

Copy-Paste Threat Actor in the Asia Pacific Region

June 19, 2020 | Reegun Jayapaul

Summary Australian Prime Minister Australian Prime Minister Scott Morrison ...