Alan Security | Dissecting Digital Threats

Sign in Subscribe

Latest

The Fox and the RAT: A Sophisticated Cyber Operation in South Asia

The Fox and the RAT: A Sophisticated Cyber Operation in South Asia

By now, many security analysts have probably seen ValleyRAT, especially since mid-July 2025. The campaign seems to be spreading quickly, and the attackers have spread out many different variant of the malware, trying to reach as many targets as possible. What is ValleyRAT? ValleyRAT is a remote access trojan that

A Security Analyst’s Guide to Security Identifiers (SIDs)

A Security Analyst’s Guide to Security Identifiers (SIDs)

The Silent Threat: An Analysis of SVG-Based Phishing Attacks

The Silent Threat: An Analysis of SVG-Based Phishing Attacks

Vidar’s Game: Infostealer in a Music App Costume with Lumma’s Touch

Vidar’s Game: Infostealer in a Music App Costume with Lumma’s Touch

Unseen Pockets: The NTFS Alternate Data Streams (ADS)

Unseen Pockets: The NTFS Alternate Data Streams (ADS)

How Fileless Malware Abuses a Windows Command

How Fileless Malware Abuses a Windows Command

Deconstructing the Digital Heartbeat: A Beginner’s Guide to Windows Processes

Deconstructing the Digital Heartbeat: A Beginner’s Guide to Windows Processes

Malware

The Fox and the RAT: A Sophisticated Cyber Operation in South Asia

The Fox and the RAT: A Sophisticated Cyber Operation in South Asia

By now, many security analysts have probably seen ValleyRAT, especially since mid-July 2025. The campaign seems to be spreading quickly, and the attackers have spread out many different variant of the malware, trying to reach as many targets as possible. What is ValleyRAT? ValleyRAT is a remote access trojan that

Vidar’s Game: Infostealer in a Music App Costume with Lumma’s Touch

Vidar’s Game: Infostealer in a Music App Costume with Lumma’s Touch

How Fileless Malware Abuses a Windows Command

How Fileless Malware Abuses a Windows Command

Windows

A Security Analyst’s Guide to Security Identifiers (SIDs)

A Security Analyst’s Guide to Security Identifiers (SIDs)

As a security analyst, you’re constantly on the lookout for the tell-tale signs of malicious activity. In the world of Windows security, one of the most fundamental and often overlooked artifacts is the Security Identifier (SID).

Unseen Pockets: The NTFS Alternate Data Streams (ADS)

Unseen Pockets: The NTFS Alternate Data Streams (ADS)

Deconstructing the Digital Heartbeat: A Beginner’s Guide to Windows Processes

Deconstructing the Digital Heartbeat: A Beginner’s Guide to Windows Processes

Phishing

The Silent Threat: An Analysis of SVG-Based Phishing Attacks

The Silent Threat: An Analysis of SVG-Based Phishing Attacks

While security professionals have hardened defenses against traditional email threats like macro-enabled documents, a seemingly benign file format is increasingly being exploited to bypass these controls: the Scalable Vector Graphic (SVG).

The Shadow in the Stream: Hunting Adversary-in-the-Middle Phishing Attacks with KQL

The Shadow in the Stream: Hunting Adversary-in-the-Middle Phishing Attacks with KQL

Vulnerability

More

What You Need to Know About the “ToolShell”(SharePoint) Vulnerability