How RL mapped a Midnight Blizzard-linked campaign from two hashes
ReversingLabs expanded the published hashes into a staging server, five stagers, two lure files and the domain-to-server links that reports left out.
Igor Lasic
Igor leads technology initiatives at ReversingLabs. He has held executive technology management positions at public, venture-funded and IPO companies. Igor brings 20 years of experience in early stage companies that deliver products as a subscription (SAAS) or as on-premises appliances. In addition Igor brings experience from the telco, enterprise and medical industries. He has served as VP of engineering at IHM Services, Active Broadband Networks, Cartiza Networks and BigBand Networks.
Posts from Igor Lasic
How RL mapped a Midnight Blizzard-linked campaign from two hashes
The Next MOVEit May Already Be in Your File Transfer Queue
MFT and other trusted systems concentrate valuable files, access and connections. Patching and inspecting what moves through it are separate defenses.
What RL Found Before Anthropic’s Midnight Blizzard Report
ReversingLabs identified and classified the malware weeks before the report was published — showing why behavioral intelligence and historical telemetry matter in the AI age.
Spectra Analyze, Spectra Core Update: Deeper Detection, Smarter Analysis
RL threat detection and binary analysis can now close the gap for threat hunters.
How Dirty Frag rose from the Copy Fail exploit
RL documented 163 samples of the Linux exploit's new variants, active malware — and developed YARA rules.
QR Code Phishing Evolves: How to Keep Up
Here's what you need to know about the rise of quishing — and how your threat hunting team can get out in front of it.
AppSec as attacker: Inside Trivy–LiteLLM
The perimeter isn't your firewall — it's your CI/CD pipeline. Here’s what to know about TeamPCP's supply chain attack.