PAPERMILL: Tracking an Emerging China-Nexus Malware Factory
Executive Summary JUMPSEC's Detection and Response Team (DART) recently escalated a phishing email after it…
Inside a DPRK BlueNoroff ClickFix Kit
Executive Summary JUMPSEC has obtained and analysed the source code behind an active BlueNoroff phishing…
Sean MoranJuly 24, 2026
Project Havoc: Breaking Identity Trust with Real-Time Synthetic Media
Ever watched yourself on video and cringed? Under normal conditions, experiencing our digital reflection can…
Sean MoranJune 29, 2026
BlackToad: Network Manipulation in an AutoIt Payload
Executive Summary Recently, JUMPSEC’s DART (Detection and Response Team) detected a phishing email targeting a…
Jack LewisMay 27, 2026
What’s happening to DevOps Security?
A canary in the coalmine As 2026 rolls on, our capacity to prompt ourselves silly…
Sean MoranMay 7, 2026
Bugs & Betrayal – Vect Analysis
Origin Story Vect is a newly observed RaaS operation that emerged in December of 2025,…
Sean MoranApril 28, 2026
ChainShell: MuddyWater’s Russian MaaS Link
Executive Summary This report documents a direct operational link between the exposed infrastructure of Iranian…
Sean MoranApril 7, 2026
ALBIROX Malware Analysis
Why ALBIRIOX warrants analysis ALBIRIOX is an Android-focused Remote Access Trojan (RAT) with the potential…
Jack LewisMarch 18, 2026