Ameer Mane·Apr 21REDSUN:The “Portal” Trick to God-ModeThe Nightmare-Eclipse suite is a series of zero-day exploits released in early April 2026. It was dropped not by a nation-state or a…
Ameer Mane·Feb 27The Ghost in the Resolver: Abusing Windows nslookup for Clickfix PayloadsIntroduction
Ameer Mane·Sep 23, 2025Hunting For PsExec.exe abusePsExec is a powerful command-line utility from the Microsoft Sysinternals Suite, designed for remote command execution. It enables system…
Ameer Mane·Sep 21, 2025Hunting For TamperedChef InfostealerWhat if that innocent-looking “free PDF editor” you downloaded wasn’t really what it claimed to be? What if, weeks later, it quietly…
Ameer Mane·Mar 19, 2025Analyzing and Hunting Lumma StealerLumma Stealer, also known as LummaC2 Stealer, is a customizable malware written in C/C++ that allows for efficient and low-level access to…
Ameer Mane·Jun 20, 2024Threat Hunting — Base64 Encoded PowerShell Commands — Part 3: Hunting and Analysing EmotetWe observed a threat actor gaining access to an environment via Emotet and operating over a eight day period. During this time period…A response icon1A response icon1
Ameer Mane·Jun 15, 2024Threat Hunting — Encoded PowerShell Commands — Part 2: Monitoring And Detecting Powershell CommandsIntroduction
Ameer Mane·Jun 13, 2024Threat Hunting — Encoded PowerShell Commands - Part 1: Understanding and Identifying ThreatsIntroduction
