Morphisec has identified a new remote access trojan used in the wild named ResolverRAT.
Looks more advanced than the usual RATs, from their write-up.
www.morphisec.com/blog/new-mal...
Looks more advanced than the usual RATs, from their write-up.
www.morphisec.com/blog/new-mal...
New Malware Variant Identified: ResolverRAT Enters the Maze
Morphisec identifies ResolverRAT, a remote access trojan with advanced capabilities and layered evasion techniques. Read on for a full threat analysis.
www.morphisec.com
April 15, 2025 at 8:58 AM
Morphisec has identified a new remote access trojan used in the wild named ResolverRAT.
Looks more advanced than the usual RATs, from their write-up.
www.morphisec.com/blog/new-mal...
Looks more advanced than the usual RATs, from their write-up.
www.morphisec.com/blog/new-mal...
Thanks so much, Morphisec, for killing your blog's RSS feed. Very helpful to the community.
January 16, 2025 at 4:11 PM
Thanks so much, Morphisec, for killing your blog's RSS feed. Very helpful to the community.
Threat actors are using unsolicited Microsoft Teams calls to trick corporate employees into infecting themselves with a new version (v3) of the Matanbuchus malware
www.morphisec.com/blog/ransomw...
www.morphisec.com/blog/ransomw...
Teams Call to Ransomware: Matanbuchus 3.0 MaaS Levels Up
Morphisec threat researchers share an in-depth analysis on Matanbuchus, a stealthy malware loader that has advanced its techniques in 2025.
www.morphisec.com
July 17, 2025 at 12:03 PM
Threat actors are using unsolicited Microsoft Teams calls to trick corporate employees into infecting themselves with a new version (v3) of the Matanbuchus malware
www.morphisec.com/blog/ransomw...
www.morphisec.com/blog/ransomw...
From Fileless Attacks to Identity Abuse: The Hard Truth About Ransomware in 2026 | Morphisec Blog www.morphisec.com/blog/from-fi...
From Fileless Attacks to Identity Abuse: The Hard Truth About Ransomware in 2026 | Morphisec Blog
Ransomware in 2026 is faster, stealthier, and identity driven. Explore the latest trends and why prevention-first security is critical.
www.morphisec.com
February 10, 2026 at 7:10 AM
From Fileless Attacks to Identity Abuse: The Hard Truth About Ransomware in 2026 | Morphisec Blog www.morphisec.com/blog/from-fi...
You’ve Got Mail: Critical #Microsoft #Outlook #Vulnerability Executes as Email is Opened
"CVE-2024-30103 — a remote code execution (RCE) vulnerability that impacts most Microsoft Outlook clients"
blog.morphisec.com/cve-2024-301...
"CVE-2024-30103 — a remote code execution (RCE) vulnerability that impacts most Microsoft Outlook clients"
blog.morphisec.com/cve-2024-301...
You’ve Got Mail: Critical Microsoft Outlook Vulnerability Executes as Email is Opened
Morphisec researchers have identified a critical Microsoft Outlook vulnerability, CVE-2024-30103, and detail its technical impact and recommended actions.
blog.morphisec.com
June 11, 2024 at 9:01 PM
You’ve Got Mail: Critical #Microsoft #Outlook #Vulnerability Executes as Email is Opened
"CVE-2024-30103 — a remote code execution (RCE) vulnerability that impacts most Microsoft Outlook clients"
blog.morphisec.com/cve-2024-301...
"CVE-2024-30103 — a remote code execution (RCE) vulnerability that impacts most Microsoft Outlook clients"
blog.morphisec.com/cve-2024-301...
I want to take a moment to recognize and thank Morphisec for fixing their blog's RSS feed! After reaching out to them privately, they quickly came up with a fix, allowing their great research to remain in TTI's Intel Feed and elsewhere!
April 18, 2025 at 4:22 AM
I want to take a moment to recognize and thank Morphisec for fixing their blog's RSS feed! After reaching out to them privately, they quickly came up with a fix, allowing their great research to remain in TTI's Intel Feed and elsewhere!
~Morphisec~
TeamPCP’s Hades poisons AI coding-tool configs to persist and steal developer credentials.
-
IOCs: Hades, UNC6780
-
#Hades #SupplyChain #ThreatIntel
TeamPCP’s Hades poisons AI coding-tool configs to persist and steal developer credentials.
-
IOCs: Hades, UNC6780
-
#Hades #SupplyChain #ThreatIntel
Hades AI Supply Chain Attack
www.morphisec.com
August 29, 2026 at 1:16 PM
~Morphisec~
TeamPCP’s Hades poisons AI coding-tool configs to persist and steal developer credentials.
-
IOCs: Hades, UNC6780
-
#Hades #SupplyChain #ThreatIntel
TeamPCP’s Hades poisons AI coding-tool configs to persist and steal developer credentials.
-
IOCs: Hades, UNC6780
-
#Hades #SupplyChain #ThreatIntel
The operator of the Noodlophile infostealer has padded the malware's file size with a Vietnamese phrase repeated million of times that reads "f*** you, Morphisec" after the security firm exposed their operation last year.
www.morphisec.com/blog/noodlop...
www.morphisec.com/blog/noodlop...
Noodlophile Stealer: When Cybercriminals Get a Bit Salty
Uncover how the Noodlophile infostealer evolved and how attackers are now padding malware to break AI analysis tools, plus key technical indicators for defenders.
www.morphisec.com
February 19, 2026 at 4:17 PM
The operator of the Noodlophile infostealer has padded the malware's file size with a Vietnamese phrase repeated million of times that reads "f*** you, Morphisec" after the security firm exposed their operation last year.
www.morphisec.com/blog/noodlop...
www.morphisec.com/blog/noodlop...
ICYMI: AV vendor goes to war with security shop over update server scare
AV vendor goes to war with security shop over update server scare
eScan lawyers up after Morphisec claimed 'critical supply-chain compromise'
A spat has erupted between antivirus vendor eScan and threat intelligence outfit Morphisec over who spotted an update server incident that disrupted some eScan customers earlier this month.…
dlvr.it
January 30, 2026 at 11:02 PM
ICYMI: AV vendor goes to war with security shop over update server scare
ぶれんだユーザーの方お気をつけを！
rocket-boys.co.jp/security-mea...
rocket-boys.co.jp/security-mea...
ロシア系ハッカーが世界中のBlender ユーザーを標的としたサイバー攻撃 キャンペーンを展開|セキュリティとデザインのニュース-セキュリティ対策Lab
エンドポイント防御ベンダーの Morphisec は、3D 制作ソフト「Blender」のプロジェクトファイル（.blend）を悪用して情報窃取マルウェア StealC V2 を配布する攻撃キャンペーンを複数阻止したとする調査レポートを公開しました。
rocket-boys.co.jp
December 9, 2025 at 4:30 AM
ぶれんだユーザーの方お気をつけを！
rocket-boys.co.jp/security-mea...
rocket-boys.co.jp/security-mea...
eScan has issued a fix, but if you were hit you may need to manually fix the hosts file first, or contact them directly for the patch.
Do you feel confident that the nightmare scenario of your cybersecurity vendor getting pwned won't impact you?
More info: www.morphisec.com/blog/critica...
4/4
Do you feel confident that the nightmare scenario of your cybersecurity vendor getting pwned won't impact you?
More info: www.morphisec.com/blog/critica...
4/4
Threat Bulletin: Critical eScan Supply Chain Compromise | Morphisec Blog
Morphisec has identified a critical eScan supply chain compromise. Read this bulletin for immediate remediate actions and IOC information.
www.morphisec.com
February 2, 2026 at 3:27 PM
eScan has issued a fix, but if you were hit you may need to manually fix the hosts file first, or contact them directly for the patch.
Do you feel confident that the nightmare scenario of your cybersecurity vendor getting pwned won't impact you?
More info: www.morphisec.com/blog/critica...
4/4
Do you feel confident that the nightmare scenario of your cybersecurity vendor getting pwned won't impact you?
More info: www.morphisec.com/blog/critica...
4/4
Why Traditional Cybersecurity Fails Against Ransomware | Morphisec Blog www.morphisec.com/blog/why-tra...
Why Traditional Cybersecurity Fails Against Ransomware
Traditional cybersecurity tools detect ransomware after the damage begins. Learn why prevention-first security works and how Morphisec stops attacks before execution.
www.morphisec.com
April 10, 2026 at 7:45 AM
Why Traditional Cybersecurity Fails Against Ransomware | Morphisec Blog www.morphisec.com/blog/why-tra...
A complete Analysis of a Vietnamese Malware / Stealer: a Python-based info stealer using Telegram as a Command & Control Channel, taunts the Infosec community via the source code - Technical Report by Profero #Infosec #Malware profero.io/blog/dit-me-...
địt mẹ mày morphisec: When Malware Authors Taunt Security Researchers
The complete analysis of Vietnamese Stealer a Python-based info stealer using Telegram as a C2.
profero.io
February 3, 2026 at 8:10 PM
A complete Analysis of a Vietnamese Malware / Stealer: a Python-based info stealer using Telegram as a Command & Control Channel, taunts the Infosec community via the source code - Technical Report by Profero #Infosec #Malware profero.io/blog/dit-me-...
Morphisec delivers on their promised analysis of the Outlook RCE: blog.morphisec.com/c...
Technical Analysis: CVE-2024-30103
In this blog Morphisec researchers provide technical analysis of CVE-2024-30103, a remote code execution vulnerability impacting Microsoft Outlook.
blog.morphisec.com
August 12, 2024 at 3:08 PM
Morphisec delivers on their promised analysis of the Outlook RCE: blog.morphisec.com/c...
Morphisec warns StealC V2 malware spread through weaponized blender files
Morphisec warns StealC V2 malware spread through weaponized blender files
StealC V2 spread via malicious Blender files on 3D model sites like CGTrader, abusing Blender’s ability to run hidden Python scripts.
securityaffairs.com
November 25, 2025 at 4:05 PM
Morphisec warns StealC V2 malware spread through weaponized blender files
Critical MS Outlook vulnerability with automatic code execution. “can be circulated from user to user and doesn’t require a click to execute … execution initiates when an affected email is opened” blog-morphisec-com.cdn.ampproject.org/c/s/blog.mor...
Redirecting
blog-morphisec-com.cdn.ampproject.org
June 12, 2024 at 5:38 PM
Critical MS Outlook vulnerability with automatic code execution. “can be circulated from user to user and doesn’t require a click to execute … execution initiates when an affected email is opened” blog-morphisec-com.cdn.ampproject.org/c/s/blog.mor...
Russian-linked Malware Campaign Hides in Blender 3D Files
www.infosecurity-magazine.com/news/russian...
www.infosecurity-magazine.com/news/russian...
Russian-linked Malware Campaign Hides in Blender 3D Files
Morphisec has observed a new operation embedding StealC V2 malware in Blender project files, targeting users via 3D assets and launching a multi-stage infection chain
www.infosecurity-magazine.com
November 26, 2025 at 3:12 PM
Russian-linked Malware Campaign Hides in Blender 3D Files
www.infosecurity-magazine.com/news/russian...
www.infosecurity-magazine.com/news/russian...
2026 Strategic Cybersecurity Planning: How CISOs Can Build a Future-Proof, Prevention-First Stack | Morphisec Blog www.morphisec.com/blog/2026-st...
2026 Strategic Cybersecurity Planning: How CISOs Can Build a Future-Proof, Prevention-First Stack | Morphisec Blog
Build a future-proof, prevention-first cybersecurity strategy for 2026. Learn how CISOs can align with Gartner trends and stop threats before execution.
www.morphisec.com
December 23, 2025 at 11:07 AM
2026 Strategic Cybersecurity Planning: How CISOs Can Build a Future-Proof, Prevention-First Stack | Morphisec Blog www.morphisec.com/blog/2026-st...
AV vendor goes to war with security shop over update server scare
AV vendor goes to war with security shop over update server scare
eScan lawyers up after Morphisec claimed 'critical supply-chain compromise'
A spat has erupted between antivirus vendor eScan and threat intelligence outfit Morphisec over who spotted an update server incident that disrupted some eScan customers earlier this month.…
dlvr.it
January 29, 2026 at 5:01 PM
AV vendor goes to war with security shop over update server scare
Morphisec threat researchers share an in-depth analysis on Matanbuchus, a stealthy malware loader that has advanced its techniques in 2025.
Teams Call to Ransomware: Matanbuchus 3.0 MaaS Levels Up
www.morphisec.com
July 18, 2025 at 2:33 PM
Morphisec threat researchers share an in-depth analysis on Matanbuchus, a stealthy malware loader that has advanced its techniques in 2025.
🟢 StealC Infostealer Discovered in Blender Model Files
🗨️ Researchers at Morphisec have discovered a malicious campaign in which attackers distribute the StealC V2 infostealer th…
#news
🗨️ Researchers at Morphisec have discovered a malicious campaign in which attackers distribute the StealC V2 infostealer th…
#news
StealC Infostealer Discovered in Blender Model Files
Read more
hackmag.com
March 27, 2026 at 11:20 PM
🟢 StealC Infostealer Discovered in Blender Model Files
🗨️ Researchers at Morphisec have discovered a malicious campaign in which attackers distribute the StealC V2 infostealer th…
#news
🗨️ Researchers at Morphisec have discovered a malicious campaign in which attackers distribute the StealC V2 infostealer th…
#news