OAuth Device Code Phishing Research and Findings
A short report on OAuth device code phishing, an attack technique that has grown rapidly in 2026. It covers how attackers use real login pages to steal access tokens and bypass MFA.
Cyber Weblog
Foundations of Malware Analysis and Its Role in Evidence Discovery
Learn the foundations of malware analysis and Windows forensics, then follow a RAT from static and dynamic analysis to Prefetch, Amcache and Registry evidence
From Blockchain to Clipboard: Dissecting an EtherHiding ClickFix Attack
A walkthrough of a real EtherHiding campaign, tracing how attackers use Polygon smart contracts as a dead drop to serve a ClickFix/FakeCAPTCHA and deliver information stealers.
Fake CAPTCHAs: How Attackers Use Them to Spread Malware
A breakdown of fake CAPTCHA malvertising campaigns used to deliver malware and information stealers like LummaStealer and StealC with a look at attack flows, findings, detection ideas to put in place, and response actions.