any.run

Title/body text match only.

• Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk

  Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk Kali365 is turning a legitimate Microsoft login into a gateway to corporate data. The phishing kit targets US organizations with attacker-controlled device codes that victims approve on Microso

• Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers

  Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers Security researchers invented a cryptocurrency startup, advertised developer jobs, and hired three people they believe were North Korean operatives. Every virtual machine the company issued

• From Langflow to Monero: Inside CVE-2026-33017 Cryptominer

  From Langflow to Monero: Inside CVE-2026-33017 Cryptominer We tracked a cryptocurrency-mining campaign exploiting CVE-2026-33017, which revealed how threat actors are now scanning exposed AI application infrastructure for their next foothold. From Langflow to Monero: Inside CVE

• New Ghost Phishing Wave Is Breaking Traditional Email Security

  New Ghost Phishing Wave Is Breaking Traditional Email Security A recent EvilTokens campaign targeting businesses across the US and Europe is exposing a new email security blind spot. This “ghost phishing” technique keeps the malicious page hidden until it decrypts and comes to l

• UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign

  UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign Cisco Talos is disclosing UAT-11795, a sophisticated, Russian-speaking, financially motivated adversary that has been conducting a malicious campaign targeting users in the U.S. an

• 20+ Hijacked Government Websites Became an Attack Channel

  20+ Hijacked Government Websites Became an Attack Channel More than 20 Brazilian government websites were hijacked and turned into malware delivery channels in an active PhantomEnigma campaign uncovered by ANY.RUN, a leading provider of interactive malware analysis and threat in

All reports →