Articles posted by Piotr Mazurkiewicz
The Invisible Danger of Exposed QR Codes and Account Recovery Artifacts2FA and it’s consAlthough TOTP-based 2FA is widely deployed to mitigate credential theft, its security rests on the assumption that the shared secret provisi...Rising usage of Apple Developer Certificates for signing Windows malwareReport summarySeveral websites and repositories on the internet circulate leaked or unauthorized iOS Enterprise Developer Certificates or Apple Developer Cer...When installing AI turns risky: The rising scale of the campaigns targeting Claude code usersReport summary The rapid adoption of Anthropic’s Claude Code LLM has been followed by a visible rise in targeted attacks aimed at developers and security pra...Mimori Ransomware is new. Its operators probably are not.Report summaryFollowing the group’s recently observed attack claims Atos Threat Research Center (TRC) identified and secured infrastructure associated with t...Behind the fake AnyDesk: Tracking a Silver Fox-Linked ValleyRAT CampaignReport summaryThis research examines a ValleyRAT distribution campaign delivered through a fake AnyDesk website targeting Chinese-speaking users. What began...Inside INC ransomware: Behind AI-Driven operationsTRC collected evidence of active campaigns, operational logs, tooling, and details of the group’s techniques, tactics, and procedures. Within Phantom platfor...