Research / Topic archive

malware analysis.

Research, walkthroughs, and field notes on malware analysis.

3 articles

ot security

Why Air-Gapped OT Environments Are Still Insecure

A technical analysis of OT isolation: Stuxnet, TRITON, offline malware channels, industrial protocols, WirelessHART, measurement integrity, and maintenance—with reproducible simulation labs.

· 45 min read

malware analysis

Inside the petshub[.]qa ClickFix: From a Fake CAPTCHA to an ACR Stealer Implant

Full teardown of the petshub[.]qa ClickFix campaign: a fake CAPTCHA that drops a blockchain-resolved macOS stealer and a four-stage Windows chain ending in an ACR Stealer implant flagged by 33/69 engines — Realtek masquerade, Heaven's Gate, and CVE-2024-38193 in tow.

· 27 min read

malware analysis

Nanga: Process Telemetry from the Syscall Layer

A kernel-driver approach to malware dynamic analysis that captures process telemetry below user-mode evasion, at the syscall layer.

· 15 min read