R136a1
r136a1.dev
As featured in
Follow
Overview
News
Technologies
Salaries
Products
People
Growth
Financials
Overview
Website about malware analysis, threat hunting and tool development.
News
SLEEPWALKER: A Passive Backdoor With Its Own Command Language
Losing access to VirusTotal Intelligence at the start of the year was surprisingly productive. Unable to hunt for interesting new malware, I stopped adding to my "TODO" pile and finally worked through my backlog from last year. That led to a detailed exam
Read more
Report
Where Have All the Complex Windows Malware and Their Analyses Gone?
You might have also wondered why, especially over the last few years, it has become increasingly rare to read about truly interesting malware and its in-depth analysis. If you've been in cybersecurity for more than a decade, you remember the feeling of a
Read more
Report
COMmand & Evade: Turla's Kazuar v3 Loader
This blog post analyzes the latest version of Turla's Kazuar v3 loader, which was previously examined at the beginning of 2024. The upgraded loader heavily utilizes the Component Object Model (COM) and employs patchless Event Tracing for Windows (ETW) and
Read more
Report
Malware Sideloading via MFC Satellite DLLs
Originally, this topic should be part of an analysis of Turla's COM Kazuar loader, but I decided to write a blog post about this DLL sideloading in general instead. Turla uses this technique since at least 2024 and also in newer campaigns. There are also
Read more
Report
BRONZE BUTLER exploits Japanese asset management software vulnerability
The threat group targeted a LANSCOPE zero-day vulnerability (CVE-2025-61932)
Read more
Report
Pro access
Upgrade to see all 15 mentions
Upgrade to a paid plan to read every media mention of this company - funding news, awards, product launches and press releases from all the outlets writing about it.
Every media mention and press release
Funding news, awards and product launches
Fresh coverage from every outlet writing about the company
Upgrade now
Cancel anytime. Secure checkout. Instant activation.