<![CDATA[Reports]]> https://delphoslabs.com/reports/ en-us Thu, 08 Oct 2026 21:01:00 GMT <![CDATA[Conti ransomware analysis: service-killing encryptor with network share targeting]]> https://delphoslabs.com/report/conti-analysis/ report-3df42374-e1fe-8091-98c2-e29ff657d10a Thu, 08 Oct 2026 00:00:00 GMT <![CDATA[Fake Google Docs Offline banking trojan analysis: overlays, token theft, and live operator takeover]]> https://delphoslabs.com/report/fake-google-docs-offline-banking-trojan-analysis/ report-3e542374-e1fe-80e3-82c8-cd4c3d3b0298 Thu, 08 Oct 2026 00:00:00 GMT <![CDATA[Inno Setup installer that contains a malicious native x64 payload]]> https://delphoslabs.com/report/inno-setup-stealer-analysis/ report-3df42374-e1fe-8061-92c7-c21c9689dc7b Thu, 08 Oct 2026 00:00:00 GMT <![CDATA[JScript downloader analysis: Korean "fitness assignment" cover story hides a download, unzip, and execute chain]]> https://delphoslabs.com/report/jscript-downloader-korean-fitness-decoy-analysis/ report-3e542374-e1fe-8065-86dd-c5e9cc883ca0 Thu, 08 Oct 2026 00:00:00 GMT <![CDATA[JScript loader analysis: fake Microsoft.Win32.TaskScheduler.dll staged through environment variables]]> https://delphoslabs.com/report/jscript-loader-fake-taskscheduler-dll-analysis/ report-3e542374-e1fe-8074-bba0-ede307e57d39 Thu, 08 Oct 2026 00:00:00 GMT <![CDATA[KarstoRAT analysis: Discord token theft, fodhelper UAC bypass, and on-command self-destruct]]> https://delphoslabs.com/report/karstorat-windows-rat-analysis/ report-3e542374-e1fe-80c7-915a-c4ed750cea63 Thu, 08 Oct 2026 00:00:00 GMT <![CDATA[Linux backdoor analysis: kworker masquerade with root account tampering]]> https://delphoslabs.com/report/linux-kworker-masquerade-bot-root-tampering/ report-3e542374-e1fe-80e6-87a1-f05784cce516 Thu, 08 Oct 2026 00:00:00 GMT <![CDATA[Multi-payload dropper analysis: process-injection stealer bundled with dork-generator tool]]> https://delphoslabs.com/report/multi-payload-dropper-analysis/ report-3df42374-e1fe-8076-b50f-cf0120a71f3e Thu, 08 Oct 2026 00:00:00 GMT <![CDATA[Terra Drone Ukraine lure analysis: LNK shortcut downloads and runs VBE payload]]> https://delphoslabs.com/report/terra-drone-ukraine-lure-lnk-downloader-analysis/ report-3e542374-e1fe-803e-881e-c7ac2b533ad3 Thu, 08 Oct 2026 00:00:00 GMT <![CDATA[A destructive Windows native binary]]> https://delphoslabs.com/report/wiper-forced-reboot-analysis/ report-3df42374-e1fe-80e7-a9bd-f336da650a56 Thu, 08 Oct 2026 00:00:00 GMT