Why a trojanised utility is harder to catch than a malicious one, and what actually gives it away Vasilis Mantas, Threat Detection Engineer > Verdict: A functioning copy of PuTTY, modified to launch a hidden PowerShell process one second after th...

What a modern triage of a 2017 ransomware sample teaches about killswitch logic and staging behaviour Vasilis Mantas — Threat Detection Engineer > Verdict: WannaCry checks a hardcoded URL before doing anything destructive. If the URL responds, th...