#winscp — Public Fediverse posts

DLL Sideloading через version.dll в WinSCP: порядок поиска DLL, прокси на Rust и перехват payload

DLL sideloading - это когда в каталог программы подсовывают библиотеку с тем же именем, что и нужная ей DLL. В результате Windows сначала цепляется именно за неё и загружает её вместо системного файла. Этот приём по-прежнему работает, даже если включён SafeDllSearchMode, и недавно его использовали в атаках против FileZilla и CPU-Z. В статье я разбираю этот метод на примере WinSCP. Сначала делаю статический анализ: проверяю зависимости в Import Table и сверяю их со списком Known DLLs, чтобы сразу отсеять те варианты, которые загрузчик всё равно берёт только из системной папки. Затем провожу динамическую проверку в Procmon и смотрю, где именно загрузчик действительно ищет DLL. В финале - прокси-библиотека на Rust.

https://habr.com/ru/articles/1067126/

#DLL_Sideloading #versiondll #Windows #Rust #Portable_Executable #WinSCP

Phantom Stealer Unmasked: Shellcode, Steganography, and Credential Theft

Phantom Stealer is a .NET-based credential-harvesting malware that collects browser credentials, saved passwords, session cookies, cryptocurrency wallet files, and system fingerprints from infected machines. Distributed through phishing emails, cracked software, and malicious links on Discord and Telegram, it employs multiple loader variants including steganography-based delivery and PowerShell shellcode injection. The malware uses extensive anti-analysis techniques including virtualization detection, API patching to disable AMSI and ETW, and timing-based sandbox evasion. It targets Chromium and Gecko-based browsers, cryptocurrency wallets, FileZilla credentials, WinSCP configurations, and Outlook profiles. Additional capabilities include keylogging, screen capture, clipboard monitoring with cryptocurrency address replacement, and Wi-Fi credential theft. The malware achieves persistence through registry Run keys or Startup folder entries.

Pulse ID: 6a6a0753fc3cdb9a380c795d
Pulse Link: https://otx.alienvault.com/pulse/6a6a0753fc3cdb9a380c795d
Pulse Author: AlienVault
Created: 2026-07-29 13:59:47

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #Clipboard #CodeInjection #Cookies #CyberSecurity #Discord #Email #FileZilla #InfoSec #Mac #Malware #NET #OTX #OpenThreatExchange #Outlook #Password #Passwords #Phishing #PowerShell #RAT #ShellCode #Steganography #Telegram #WinSCP #Word #bot #cryptocurrency #AlienVault

Phantom Stealer Unmasked: Shellcode, Steganography, and Credential Theft

Phantom Stealer is a .NET-based credential-harvesting malware that collects browser credentials, saved passwords, session cookies, cryptocurrency wallet files, and system fingerprints from infected machines. Distributed through phishing emails, cracked software, and malicious links on Discord and Telegram, it employs multiple loader variants including steganography-based delivery and PowerShell shellcode injection. The malware uses extensive anti-analysis techniques including virtualization detection, API patching to disable AMSI and ETW, and timing-based sandbox evasion. It targets Chromium and Gecko-based browsers, cryptocurrency wallets, FileZilla credentials, WinSCP configurations, and Outlook profiles. Additional capabilities include keylogging, screen capture, clipboard monitoring with cryptocurrency address replacement, and Wi-Fi credential theft. The malware achieves persistence through registry Run keys or Startup folder entries.

Pulse ID: 6a6a0753fc3cdb9a380c795d
Pulse Link: https://otx.alienvault.com/pulse/6a6a0753fc3cdb9a380c795d
Pulse Author: AlienVault
Created: 2026-07-29 13:59:47

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #Clipboard #CodeInjection #Cookies #CyberSecurity #Discord #Email #FileZilla #InfoSec #Mac #Malware #NET #OTX #OpenThreatExchange #Outlook #Password #Passwords #Phishing #PowerShell #RAT #ShellCode #Steganography #Telegram #WinSCP #Word #bot #cryptocurrency #AlienVault

#FileZilla 不允许除了浏览器以外的程序从它官网下载安装包，所以不能进 #winget
于是我下载了 #WinSCP

https://github.com/microsoft/winget-pkgs/issues/78578#issuecomment-1238126217

Martin Přikryl released #WinSCP version 6.5.6. https://winscp.net/eng/download.php

Martin Přikryl released #WinSCP version 6.5.6. https://winscp.net/eng/download.php

Software of the week.
01/19/2026 to 01/26/2026
This review examines the technology, features, and overall value of WinSCP, analyzing why it remains the go-to solution for millions of professionals despite the influx of newer, shinier competitors.
#Software #WinSCP #sflorg
https://www.sflorg.com/2026/01/rev01192601.html

Software of the week.
01/19/2026 to 01/26/2026
This review examines the technology, features, and overall value of WinSCP, analyzing why it remains the go-to solution for millions of professionals despite the influx of newer, shinier competitors.
#Software #WinSCP #sflorg
https://www.sflorg.com/2026/01/rev01192601.html

Fake Microsoft Teams and Google Meet Downloads Spread Oyster Backdoor https://hackread.com/fake-microsoft-teams-google-meet-download-oyster-backdoor/ #MicrosoftTeams #CleanUpLoader #Cybersecurity #Malvertising #SEOPoisoning #CyberAttack #Broomstick #CyberProof #GoogleMeet #Security #backdoor #security #Malware #Oyster #WinSCP #PuTTY

Fake Microsoft Teams and Google Meet Downloads Spread Oyster Backdoor https://hackread.com/fake-microsoft-teams-google-meet-download-oyster-backdoor/ #MicrosoftTeams #CleanUpLoader #Cybersecurity #Malvertising #SEOPoisoning #CyberAttack #Broomstick #CyberProof #GoogleMeet #Security #backdoor #security #Malware #Oyster #WinSCP #PuTTY

My approach to making it easy for designers to update static websites on Linux server without dealing with Linux CLI.

https://tech.mrleong.net/how-to-configure-a-linux-web-directory-for-multiple-users-designer-friendly

#linux #webhosting #webdevelopment #sysadmin #devops #howto #vscode #winscp #cyberduck

My approach to making it easy for designers to update static websites on Linux server without dealing with Linux CLI.

https://tech.mrleong.net/how-to-configure-a-linux-web-directory-for-multiple-users-designer-friendly

#linux #webhosting #webdevelopment #sysadmin #devops #howto #vscode #winscp #cyberduck

Martin Přikryl released #WinSCP version 6.5.5. https://winscp.net/eng/download.php

Martin Přikryl released #WinSCP version 6.5.5. https://winscp.net/eng/download.php

Software of the week.
11/03/2025 to 11/10/2025
WinSCP is an open-source, free-for-Windows graphical file manager that specializes in secure file transfers. Its primary strength lies not just in its user-friendly GUI, but in its profound and robust automation and scripting capabilities, which set it apart from its main competitors.
#Software #WinSCP #sflorg
https://www.sflorg.com/2025/11/rev11032501.html

Software of the week.
11/03/2025 to 11/10/2025
WinSCP is an open-source, free-for-Windows graphical file manager that specializes in secure file transfers. Its primary strength lies not just in its user-friendly GUI, but in its profound and robust automation and scripting capabilities, which set it apart from its main competitors.
#Software #WinSCP #sflorg
https://www.sflorg.com/2025/11/rev11032501.html

Martin Přikryl released #WinSCP version 6.5.4. https://winscp.net/eng/download.php

Martin Přikryl released #WinSCP version 6.5.4. https://winscp.net/eng/download.php

After reading a few answers given by #filezilla devs to users, I’ve decided to never use this software again. If you need an #ftpclient just use #winscp or #cyberduck. The arrogance of some people truly doesn’t deserve the attention. 😒

After reading a few answers given by #filezilla devs to users, I’ve decided to never use this software again. If you need an #ftpclient just use #winscp or #cyberduck. The arrogance of some people truly doesn’t deserve the attention. 😒

I'm not a programmer, but sometimes I code anyway.

Since I often use that code on my headless server, I'm used to edit with nano, but that's not always very handy. So today I started looking for an #FTP extension in #VSCODE, to let me edit and then upload to the server.
It didn't go well, because most plugins have bad ratings, so I didn't even try any. Then I remembered that #WinSCP can do FTP as well.. Well, it works wonders!

After I connect to my server's FTP, I can just double click any file in the remote pane of WinSCP and edit them on the fly with whatever application is tied to the file's extension; save and it's already there.

So, now, for a simple #XMPP bot which is actually a single #python file, I created an #hardlink from source dir to another dir inside ~/ftp and it's double magic. After I save on VSCODE, it's saved in the FTP dir and in the source dir as well!

💛

#WinSCP 6.5.3 has been released (#SFTP / #SCP / #FTPS / #FTP / #PuTTY / #AWS / #AWSS3 / #AmazonS3 / #Amazon) https://winscp.net/

#WinSCP 6.5.3 has been released (#SFTP / #SCP / #FTPS / #FTP / #PuTTY / #AWS / #AWSS3 / #AmazonS3 / #Amazon) https://winscp.net/

SEO poisoning attack reported by Arctic Wolf Networks delivers Trojanized IT tools
https://www.admin-magazine.com/News/SEO-Poisoning-Attack-Delivers-Trojanized-IT-Tools?utm_source=mam
#SEO #attack #ArcticWolfNetworks #Trojanized #PuTTY #WinSCP #security

SEO poisoning attack reported by Arctic Wolf Networks delivers Trojanized IT tools
https://www.admin-magazine.com/News/SEO-Poisoning-Attack-Delivers-Trojanized-IT-Tools?utm_source=mam
#SEO #attack #ArcticWolfNetworks #Trojanized #PuTTY #WinSCP #security

Martin Přikryl released #WinSCP version 6.5.3. https://winscp.net/eng/download.php

Martin Přikryl released #WinSCP version 6.5.3. https://winscp.net/eng/download.php

#WinSCP kennt ihr?
Gibt's was gleichwertiges für #Linux / #Debian ?

Wer #FileZilla nennt, dem oder der hau ich die Tastatur um die Ohren 🙊 Das kotzt mich übelst an.

#WinSCP kennt ihr?
Gibtś was gleichwertiges für #Linux / #Debian ?

Wer #FileZilla nennt, dem oder der hau ich die Tastatur um die Ohren 🙊 Das kotzt mich übelst an.

The wonderful open source project of Muenchen has been thriving for two decades. In case you do not realize it it's an amazing feat; government with all its complex and intricate switches, circuits, departments, have switched from closed Source and are freed from the clutches of microsoft

Go read about it here

#OpenSource #POSIX #GNU #GPL #Linux #City #Deutschland #Germany #transparency #winSCP

https://opensource.muenchen.de/

The wonderful open source project of Muenchen has been thriving for two decades. In case you do not realize it it's an amazing feat; government with all its complex and intricate switches, circuits, departments, have switched from closed Source and are freed from the clutches of microsoft

Go read about it here

#OpenSource #POSIX #GNU #GPL #Linux #City #Deutschland #Germany #transparency #winSCP

https://opensource.muenchen.de/

Martin Přikryl released #WinSCP version 6.5.2. https://winscp.net/eng/download.php

Martin Přikryl released #WinSCP version 6.5.2. https://winscp.net/eng/download.php

Got a little post about how to use #SSH from #Windows workstations; hopefully will complement folks running #Linux game servers to easily manage their game files with #WinSCP

https://www.veraciousnetwork.com/posts/2025-05/26-howto-ssh-from-windows.html

Let me know if there's anything I missed that may be helpful to folks new to SSH!

OH, and this is the first post using some of @carl 's code to automatically show Mastodon comments on the website! Interested to see how well that goes.

#WinSCP 6.5.1 has been released (#SFTP / #SCP / #FTPS / #FTP / #PuTTY / #AWS / #AWSS3 / #AmazonS3 / #Amazon) https://winscp.net/

#WinSCP 6.5.1 has been released (#SFTP / #SCP / #FTPS / #FTP / #PuTTY / #AWS / #AWSS3 / #AmazonS3 / #Amazon) https://winscp.net/

Martin Přikryl released #WinSCP version 6.5.1. https://winscp.net/eng/download.php

Martin Přikryl released #WinSCP version 6.5.1. https://winscp.net/eng/download.php

Martin Přikryl released #WinSCP version 6.5. https://winscp.net/eng/download.php

Martin Přikryl released #WinSCP version 6.5. https://winscp.net/eng/download.php

#WinSCP 6.3.7 has been released (#SFTP / #SCP / #FTPS / #FTP / #PuTTY / #AWS / #AWSS3 / #AmazonS3 / #Amazon) https://winscp.net/

#WinSCP 6.3.7 has been released (#SFTP / #SCP / #FTPS / #FTP / #PuTTY / #AWS / #AWSS3 / #AmazonS3 / #Amazon) https://winscp.net/

I just found out how to make #WinSCP go to a specific drive/directory by path, instead of trying to navigate that inaccessible drive browser thing it has. Why is it a custom control anyway? Stupid. I feel clever now.

I just found out how to make #WinSCP go to a specific drive/directory by path, instead of trying to navigate that inaccessible drive browser thing it has. Why is it a custom control anyway? Stupid. I feel clever now.

Martin Přikryl released #WinSCP version 6.3.7. https://winscp.net/eng/download.php

Martin Přikryl released #WinSCP version 6.3.7. https://winscp.net/eng/download.php

Как Перекинуть Файлы с LapTop-a на смартфон по WiFi

Допустим Вы скачали на свой NetTop PC аудио книгу и теперь хотите её перекинуть на Android телефон. Как же это можно провернуть? Предположим, что вас на телефоне нет SD карты, да и USB кабель тоже пропал куда-то. Как же перекинуть огромный файл с LapTop -а на PalmTop ? В этом тексте я напиcал, как посылать файлы по WiFi .

https://habr.com/ru/articles/792386/

#winscp #WiFi_FTP_Server #WiFi #ip #port #vpn #ftp_server #FTP_client #scp #socket

#WinSCP 6.3.6 has been released (#SFTP / #SCP / #FTPS / #FTP / #PuTTY / #AWS / #AWSS3 / #AmazonS3 / #Amazon) https://winscp.net/