Monthly Threat Report April 2025

Generative AI is fueling a rise in low-effort, high-volume email attacks, making phishing campaigns easier to launch than ever. PDF, Archive, and HTML files dominated as the preferred payload carriers. Meanwhile, DocuSign, DHL, and PayPal remained the top targets for...

100 Days of YARA: Writing Signatures for .NET Malware

If YARA signatures for .NET assemblies only rely on strings, they are very limited. We explore more detection opportunities, including IL code, method signature definitions and specific custom attributes. Knowledge about the underlying .NET metadata structures, tokens...