https://gelato07.github.io/Cyber Weblog 2026-10-09T01:47:14+00:00 Lachlan Gelavis https://gelato07.github.io/ Jekyll © 2026 Lachlan Gelavis /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png OAuth Device Code Phishing Research and Findings2026-09-29T16:00:00+00:00 2026-09-30T09:35:28+00:00 https://gelato07.github.io/posts/OAuth-Device-Code-Phishing/ Lachlan Gelavis A short report on OAuth device code phishing, an attack technique that has grown rapidly in 2026. It covers how attackers use real login pages to steal access tokens and bypass MFA. Foundations of Malware Analysis and Its Role in Evidence Discovery2026-09-29T16:00:00+00:00 2026-10-02T06:08:27+00:00 https://gelato07.github.io/posts/Coming-Soon-Digital-Forensics-Incident-Response/ Lachlan Gelavis Learn the foundations of malware analysis and Windows forensics, then follow a RAT from static and dynamic analysis to Prefetch, Amcache and Registry evidence From Blockchain to Clipboard: Dissecting an EtherHiding ClickFix Attack2026-09-27T16:00:00+00:00 2026-09-29T11:41:57+00:00 https://gelato07.github.io/posts/EtherHiding-Blockchain-ClickFix/ Lachlan Gelavis A walkthrough of a real EtherHiding campaign, tracing how attackers use Polygon smart contracts as a dead drop to serve a ClickFix/FakeCAPTCHA and deliver information stealers. Fake CAPTCHAs: How Attackers Use Them to Spread Malware2025-05-01T16:00:00+00:00 2026-09-26T03:47:58+00:00 https://gelato07.github.io/posts/Clickfix-FakeCaptcha-Delivering-Lumma-Stealer/ Lachlan Gelavis A breakdown of fake CAPTCHA malvertising campaigns used to deliver malware and information stealers like LummaStealer and StealC with a look at attack flows, findings, detection ideas to put in place, and response actions.