VMRay

@vmray

Sandboxing reinvented for the threats of today - and tomorrow. | Imprint: vmray.com/legal-note/

Boston, MA

bit.ly/3Nu47So

Replies Reposts Media

Pinned
VMRay
@vmray
Aug 31
🔍 Home path leak in infostealer links developer to ransomware 🔗 Report: vmray.com/analyses/zer0d… The stealer, written in Rust, is called "Zer0day Stealer" and contains the string "/home/tcherber/.cargo/" baked into the binary as part of the build process. A search for this
1
VMRay
@vmray
Aug 12
Threat actors keep finding ways to make phishing look ordinary. vmray.com/july-2026-dete… A sign-in page that asks you to clear a CAPTCHA first. A link that passes through a few legitimate redirect services before it lands. A next-stage address fetched from a Web3 service at
VMRay
@vmray
Aug 10
🔥 Alert: Chrome extension lets attackers remotely control out-of-focus browser windows to keep malicious actions hidden 🔗 Report: vmray.com/analyses/chrom… We found a sample likely written in Rust which drops Stealc and a malicious Chrome extension pretending to be
2
VMRay
@vmray
Jul 29
A scanner probes an unfamiliar IP. The server responds with a 301 redirect to github[.]com. Nothing to see. Move on. That was the point. vmray.com/execution-leve… VMRay Labs has published an analysis of Operation STANDOFF, a previously unattributed cybercriminal operation running
VMRay
@vmray
Jul 20
😯 A curious finding: Python malware drops and compiles three C source files at runtime ( ! ) to steal credentials 🔗 Report: vmray.com/analyses/ultim… We have identified an information stealer called “ULTIMATE STEALER” or “Ishmael_19Bot” written in Python and distributed as a
2