#securonix — Public Fediverse posts

Criminal IP Enhances ThreatQ with Real-Time Exposure Intelligence

Criminal IP's integration with ThreatQ supercharges threat intelligence by delivering real-time exposure insights, empowering organizations to analyze and respond to threats faster and more effectively. Analysts can now access crucial IP intelligence directly within ThreatQ, streamlining investigations and threat validation.

https://osintsights.com/criminal-ip-enhances-threatq-with-real-time-exposure-intelligence?utm_source=mastodon&utm_medium=social

#ThreatIntelligence #Threatq #CriminalIp #Securonix #IpReputation

Look y’all, it can’t be a political shitstorm ALL the time. We have to leave time for #infosec shitstorms too! Major new #malware on the loose.

Here’s the TLDR from the researchers:
#Securonix Threat Research has been tracking a stealthy malware campaign that uses an uncommon chain of #VHD abuse, script-based execution, self-parsing batch logic, fileless PowerShell injections and ultimately dropping #RAT. The attack leverages IPFS-hosted VHD files, extreme script obfuscation, runtime decryption, and in-memory shellcode injection into trusted Windows processes, never dropping a decrypted binary to disk.

In English: Malware is delivered via what looks like a PDF. This pdf will open and run a virtual hard drive (vhd), able to execute code without leaving a trace. It’s beautiful, but evil as fuck.

What to do? Don’t open files from unknown senders.
#deadvax

https://www.securonix.com/blog/deadvax-threat-research-security-advisory/

Look y’all, it can’t be a political shitstorm ALL the time. We have to leave time for #infosec shitstorms too! Major new #malware on the loose.

Here’s the TLDR from the researchers:
#Securonix Threat Research has been tracking a stealthy malware campaign that uses an uncommon chain of #VHD abuse, script-based execution, self-parsing batch logic, fileless PowerShell injections and ultimately dropping #RAT. The attack leverages IPFS-hosted VHD files, extreme script obfuscation, runtime decryption, and in-memory shellcode injection into trusted Windows processes, never dropping a decrypted binary to disk.

In English: Malware is delivered via what looks like a PDF. This pdf will open and run a virtual hard drive (vhd), able to execute code without leaving a trace. It’s beautiful, but evil as fuck.

What to do? Don’t open files from unknown senders.
#deadvax

https://www.securonix.com/blog/deadvax-threat-research-security-advisory/

Look y’all, it can’t be a political shitstorm ALL the time. We have to leave time for #infosec shitstorms too! Major new #malware on the loose.

Here’s the TLDR from the researchers:
#Securonix Threat Research has been tracking a stealthy malware campaign that uses an uncommon chain of #VHD abuse, script-based execution, self-parsing batch logic, fileless PowerShell injections and ultimately dropping #RAT. The attack leverages IPFS-hosted VHD files, extreme script obfuscation, runtime decryption, and in-memory shellcode injection into trusted Windows processes, never dropping a decrypted binary to disk.

In English: Malware is delivered via what looks like a PDF. This pdf will open and run a virtual hard drive (vhd), able to execute code without leaving a trace. It’s beautiful, but evil as fuck.

What to do? Don’t open files from unknown senders.
#deadvax

https://www.securonix.com/blog/deadvax-threat-research-security-advisory/

Look y’all, it can’t be a political shitstorm ALL the time. We have to leave time for #infosec shitstorms too! Major new #malware on the loose.

Here’s the TLDR from the researchers:
#Securonix Threat Research has been tracking a stealthy malware campaign that uses an uncommon chain of #VHD abuse, script-based execution, self-parsing batch logic, fileless PowerShell injections and ultimately dropping #RAT. The attack leverages IPFS-hosted VHD files, extreme script obfuscation, runtime decryption, and in-memory shellcode injection into trusted Windows processes, never dropping a decrypted binary to disk.

In English: Malware is delivered via what looks like a PDF. This pdf will open and run a virtual hard drive (vhd), able to execute code without leaving a trace. It’s beautiful, but evil as fuck.

What to do? Don’t open files from unknown senders.
#deadvax

https://www.securonix.com/blog/deadvax-threat-research-security-advisory/

Look y’all, it can’t be a political shitstorm ALL the time. We have to leave time for #infosec shitstorms too! Major new #malware on the loose.

Here’s the TLDR from the researchers:
#Securonix Threat Research has been tracking a stealthy malware campaign that uses an uncommon chain of #VHD abuse, script-based execution, self-parsing batch logic, fileless PowerShell injections and ultimately dropping #RAT. The attack leverages IPFS-hosted VHD files, extreme script obfuscation, runtime decryption, and in-memory shellcode injection into trusted Windows processes, never dropping a decrypted binary to disk.

In English: Malware is delivered via what looks like a PDF. This pdf will open and run a virtual hard drive (vhd), able to execute code without leaving a trace. It’s beautiful, but evil as fuck.

What to do? Don’t open files from unknown senders.
#deadvax

https://www.securonix.com/blog/deadvax-threat-research-security-advisory/

Fake Booking.com emails and BSODs used to infect hospitality staff https://www.helpnetsecurity.com/2026/01/07/fake-booking-com-emails-bsod-hospitality/ #hospitalityindustry #remoteaccesstrojan #socialengineering #Don'tmiss #Securonix #Hotstuff #phishing #malware #Europe #News

Securonix DPM Flex optimizes SIEM data management https://www.helpnetsecurity.com/2025/11/12/securonix-dpm-flex-siem-data-management/ #Industrynews #Securonix

Securonix Acquires Threat Intelligence Firm ThreatQuotient – Source: www.darkreading.com https://ciso2ciso.com/securonix-acquires-threat-intelligence-firm-threatquotient-source-www-darkreading-com/ #rssfeedpostgeneratorecho #DarkReadingSecurity #CyberSecurityNews #DARKReading #Securonix

Securonix Acquires Threat Intelligence Firm ThreatQuotient https://www.securityweek.com/securonix-acquires-threat-intelligence-firm-threatquotient/ #ArtificialIntelligence #ThreatIntelligence #ThreatQuotient #Funding/M&A #Securonix #SIEM #SOAR

Securonix Acquires Threat Intelligence Firm ThreatQuotient https://www.securityweek.com/securonix-acquires-threat-intelligence-firm-threatquotient/ #ArtificialIntelligence #ThreatIntelligence #ThreatQuotient #Funding/M&A #Securonix #SIEM #SOAR

Securonix brings autonomous decision-making to security operations https://www.helpnetsecurity.com/2025/04/30/securonix-genai-agents/ #Industrynews #Securonix

Beware of phishing emails delivering backdoored Linux VMs! https://www.helpnetsecurity.com/2024/11/05/phishing-oneamerica-survey-linux-vm-backdoor/ #virtualization #Don'tmiss #Securonix #Hotstuff #backdoor #phishing #Linux #News

Securonix and Cribl partner to enhance threat detection with advanced data integration https://www.helpnetsecurity.com/2024/08/08/securonix-cribl/ #Industrynews #Securonix #Cribl

Securonix unveils Cyber Data Fabric and Noise Canceling SIEM in EON suite https://www.helpnetsecurity.com/2024/08/02/securonix-ai-reinforced-capabilities/ #Industrynews #Securonix

GISEC Global 2024 video walkthrough https://www.helpnetsecurity.com/2024/04/24/gisec-global-2024-video-walkthrough/ #WaterfallSecuritySolutions #UAECyberSecurityCouncil #SecurityScorecard #cybersecurity #conferences #CyberKnight #GoogleCloud #Cloudflare #Resecurity #SecureLink #toolswatch #TrendMicro #Don'tmiss #Securonix #Hotstuff #Netscout #Netskope #Claroty #Zscaler #NetSPI #OPSWAT #Sophos #Splunk #Video #GISEC #video

GISEC Global 2024 video walkthrough https://www.helpnetsecurity.com/2024/04/24/gisec-global-2024-video-walkthrough/ #WaterfallSecuritySolutions #UAECyberSecurityCouncil #SecurityScorecard #cybersecurity #conferences #CyberKnight #GoogleCloud #Cloudflare #Resecurity #SecureLink #toolswatch #TrendMicro #Don'tmiss #Securonix #Hotstuff #Netscout #Netskope #Claroty #Zscaler #NetSPI #OPSWAT #Sophos #Splunk #Video #GISEC #video

GISEC Global 2024 video walkthrough https://www.helpnetsecurity.com/2024/04/24/gisec-global-2024-video-walkthrough/ #WaterfallSecuritySolutions #UAECyberSecurityCouncil #SecurityScorecard #cybersecurity #conferences #CyberKnight #GoogleCloud #Cloudflare #Resecurity #SecureLink #toolswatch #TrendMicro #Don'tmiss #Securonix #Hotstuff #Netscout #Netskope #Claroty #Zscaler #NetSPI #OPSWAT #Sophos #Splunk #Video #GISEC #video

GISEC Global 2024 video walkthrough https://www.helpnetsecurity.com/2024/04/24/gisec-global-2024-video-walkthrough/ #WaterfallSecuritySolutions #UAECyberSecurityCouncil #SecurityScorecard #cybersecurity #conferences #CyberKnight #GoogleCloud #Cloudflare #Resecurity #SecureLink #toolswatch #TrendMicro #Don'tmiss #Securonix #Hotstuff #Netscout #Netskope #Claroty #Zscaler #NetSPI #OPSWAT #Sophos #Splunk #Video #GISEC #video

Researchers at threat analytics firm #Securonix have uncovered a new #Python based malware named PY#RATION, a remote access trojan (RAT) that gives its operators control over breached systems #cybersecurity https://andreafortuna.org/2023/01/25/py-ration-new-python-based-malware