资讯

Security Boulevard2 天

APT37 Targets Windows with Rust Backdoor and Python Loader

IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals ...
GitHub11 天

Windows 11 Update - Powershell

All risks associated with this script are on you for running it. See the "What this script does" section for details. Stops services associated with automatic Windows Update. Deletes the old temporary ...
Arabian Post on MSN11 天

Malicious Shortcut Files Linked with Deceptive PDFs in Global Espionage Campaign

A sophisticated cyber‑espionage operation is exploiting Windows shortcut files disguised alongside seemingly genuine PDF newsletters to surreptitiously infiltrate institutions across Asia and the ...
GitHub13 天

Powershell script to remove AutoPilot devices completely by serial number

Remove the device from the device list in Endpoint Remove the device from the AutoPilot device list (also found in Endpoint) Remove the device from the device list in the Azure/Entra portal This ...
Infosecurity-magazine.com28 天

Malvertising Campaign Deploys Modular PowerShell Malware PS1Bot

An ongoing malware campaign active throughout 2025 is using malvertising to deliver a sophisticated PowerShell-based framework. According to Cisco Talos researchers, the malware is named “PS1Bot” due ...