Malware Analysis

Honeynet Field Notes, Day 1: A Mirai Loader and an IRC DDoS Bot

2 October 2026·1250 words·6 mins

Threat Intelligence Detection Engineering Honeypot Mirai ShellBot Cowrie Botnets IOCs Malware Analysis

Day one of running a honeynet produced two malware samples in twelve hours. Neither cared about the ICS disguise. Both came in through default and predictable credentials on SSH and Telnet.

IronWorm: A Self-Propagating npm Worm Built to Steal Machine Identities

8 June 2026·1142 words·6 mins

Threat Research Supply Chain Security Non-Human Identities DevSecOps Malware Analysis

A practitioner breakdown of the npm worm that sweeps environment variables on install and republishes itself through Trusted Publishing.

CPU-Z and HWMonitor Hijacked: Inside the CPUID Supply Chain Attack

12 April 2026·945 words·5 mins

Threat Research Supply Chain Security Malware Analysis Threat Intelligence Endpoint Security

How the April 2026 compromise of CPUID’s site turned CPU-Z and HWMonitor downloads into a multi-stage malware delivery chain.

ATM Jackpotting: The Emerging Threat Draining U.S. Cash Machines

22 February 2026·2845 words·14 mins

Threat Research Cybercrime Threat Intelligence Malware Analysis Endpoint Security

A threat that matured abroad has found a home in the US. How ATM jackpotting works, why it keeps working, and what the industry guidance says.

OpenClaw: When Your AI Assistant can act as Malware

31 January 2026·2138 words·11 mins

AI Security Agentic Ai AI Governance Malware Analysis Vulnerability Management

OpenClaw is a case study in how fast AI agent deployment outran the governance meant to contain it. The vulnerabilities and what they teach.

↑