canisrufus

CanisRufus A stealthy Python based Windows backdoor that uses Github as a command and control server. Requirements Python 2.x pygithub3 module PyCrypto module WMI module Enum34 module Netifaces module pypiwin32 module Features Encrypted transportation messages AES + SHA256 hashing Generate comput...

Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2

The Pakistan-aligned threat group tracked as Transparent Tribe aka APT36 and Earth Karkaddan has been attributed to a fresh set of cyber attacks targeting government and defense entities in India and Afghanistan. The attacks, per Zscaler ThreatLabz, involve the use of previously undocumented tool...

Backdoored 3CXDesktopApp Installer Used in Active Threat Campaign

Emergent threats evolve quickly. We will update this blog with new information as it comes to light and we are able to verify it. Erick Galinkin, Ted Samuels, Zach Dayton, Eoin Miller, Caitlin Condon, Stephen Fewer, Spencer McIntyre, and Christiaan Beek all contributed to this blog. On Wednesday,...