ARC Labs

Staying ahead of the curve through proactively identifying and neutralizing emerging cyber threats to ensure the safety and security of your digital assets.

Home » ARC Labs

Featured ARC Labs

Analysis of a JavaScript-based Phishing Campaign Targeting Microsoft 365 Credentials

March 4, 2025

Cleo MFT Mass Exploitation Payload Analysis

December 10, 2024

View All ARC Labs Research

Analysis of a JavaScript-based Phishing Campaign Targeting Microsoft 365 Credentials

March 4, 2025

Cleo MFT Mass Exploitation Payload Analysis

December 10, 2024

Rhadamanthys Stealer Analysis for Detection Opportunities

December 2, 2024

Shining a Light in the Dark – How Binary Defense Uncovered an APT Lurking in Shadows of IT Cover

Shining a Light in the Dark – How Binary Defense Uncovered an APT Lurking in Shadows of IT

September 19, 2024

Understanding Sleep Obfuscation Cover

Understanding Sleep Obfuscation

August 28, 2024

Cybersecurity Moneyball Part 2: Binary Defense’s New Paradigm in Malware Detection Cover

Cybersecurity Moneyball Part 2: Binary Defense’s New Paradigm in Malware Detection

August 7, 2024

Technical Analysis: Killer Ultra Malware Targeting EDR Products in Ransomware Attacks Cover

Technical Analysis: Killer Ultra Malware Targeting EDR Products in Ransomware Attacks

July 16, 2024

Cybersecurity Moneyball Part 1: Managed Deception for Easy Outs

June 11, 2024

Wineloader - Analysis of the Infection Chain Cover

Wineloader – Analysis of the Infection Chain

June 4, 2024

LetMeowIn - Analysis of a Credential Dumper Cover

LetMeowIn – Analysis of a Credential Dumper

May 21, 2024

Communication is Key - Leveraging Business Frameworks to Develop a Detection and Response Strategy Cover

Communication is Key – Leveraging Business Frameworks to Develop a Detection and Response Strategy

April 23, 2024

Diving into Hidden Scheduled Tasks Cover

Diving into Hidden Scheduled Tasks

April 16, 2024

Sisense Data Compromise: ARC Labs Intelligence Flash Cover

Sisense Data Compromise: ARC Labs Intelligence Flash

April 11, 2024

Analyzing-CryptoJS-Encrypted-Phishing-Attempt Cover

Analyzing CryptoJS Encrypted Phishing Attempt

April 9, 2024

Qakbot Strikes Back: Understanding the Threat Cover

Qakbot Strikes Back: Understanding the Threat

April 4, 2024

Mastering Windows Access Control: Understanding SeDebugPrivilege Cover

Mastering Windows Access Control: Understanding SeDebugPrivilege

October 12, 2023

Client-Server-Relationship-Blog

The Client/Server Relationship — A Match Made In Heaven

August 17, 2023

ThreadSleeper: Suspending Threads via GMER64 Driver

July 10, 2023

Detecting-Follina-Exploits-Blog

Detecting Follina Exploits Using a Remote Answer File

April 13, 2023

img:is([sizes="auto" i],[sizes^="auto," i]){contain-intrinsic-size:3000px 1500px;}.wp-block-audio :where(figcaption){color:#555;font-size:13px;text-align:center;}.is-dark-theme .wp-block-audio :where(figcaption){color:rgba(255,255,255,.65);}.wp-block-audio{margin:0 0 1em;}.wp-block-code{border:1px solid #ccc;border-radius:4px;font-family:Menlo,Consolas,monaco,monospace;padding:.8em 1em;}.wp-block-embed :where(figcaption){color:#555;font-size:13px;text-align:center;}.is-dark-theme .wp-block-embed :where(figcaption){color:rgba(255,255,255,.65);}.wp-block-embed{margin:0 0 1em;}.blocks-gallery-caption{color:#555;font-size:13px;text-align:center;}.is-dark-theme .blocks-gallery-caption{color:rgba(255,255,255,.65);}:root :where(.wp-block-image figcaption){color:#555;font-size:13px;text-align:center;}.is-dark-theme :root :where(.wp-block-image figcaption){color:rgba(255,255,255,.65);}.wp-block-image{margin:0 0 1em;}.wp-block-pullquote{border-bottom:4px solid;border-top:4px solid;color:currentColor;margin-bottom:1.75em;}.wp-block-pullquote cite,.wp-block-pullquote footer,.wp-block-pullquote__citation{color:currentColor;font-size:.8125em;font-style:normal;text-transform:uppercase;}.wp-block-quote{border-left:.25em solid;margin:0 0 1.75em;padding-left:1em;}.wp-block-quote cite,.wp-block-quote footer{color:currentColor;font-size:.8125em;font-style:normal;position:relative;}.wp-block-quote:where(.has-text-align-right){border-left:none;border-right:.25em solid;padding-left:0;padding-right:1em;}.wp-block-quote:where(.has-text-align-center){border:none;padding-left:0;}.wp-block-quote.is-large,.wp-block-quote.is-style-large,.wp-block-quote:where(.is-style-plain){border:none;}.wp-block-search .wp-block-search__label{font-weight:700;}.wp-block-search__button{border:1px solid #ccc;padding:.375em .625em;}:where(.wp-block-group.has-background){padding:1.25em 2.375em;}.wp-block-separator.has-css-opacity{opacity:.4;}.wp-block-separator{border:none;border-bottom:2px solid;margin-left:auto;margin-right:auto;}.wp-block-separator.has-alpha-channel-opacity{opacity:1;}.wp-block-separator:not(.is-style-wide):not(.is-style-dots){width:100px;}.wp-block-separator.has-background:not(.is-style-dots){border-bottom:none;height:1px;}.wp-block-separator.has-background:not(.is-style-wide):not(.is-style-dots){height:2px;}.wp-block-table{margin:0 0 1em;}.wp-block-table td,.wp-block-table th{word-break:normal;}.wp-block-table :where(figcaption){color:#555;font-size:13px;text-align:center;}.is-dark-theme .wp-block-table :where(figcaption){color:rgba(255,255,255,.65);}.wp-block-video :where(figcaption){color:#555;font-size:13px;text-align:center;}.is-dark-theme .wp-block-video :where(figcaption){color:rgba(255,255,255,.65);}.wp-block-video{margin:0 0 1em;}:root :where(.wp-block-template-part.has-background){margin-bottom:0;margin-top:0;padding:1.25em 2.375em;}.wp-block-code-snippet-block-dm-code-snippet-block-dm{background-color:#21759b;color:#fff;padding:2px;}.safe-svg-cover{text-align:center;}.safe-svg-cover .safe-svg-inside{display:inline-block;max-width:100%;}.safe-svg-cover svg{height:100%;max-height:100%;max-width:100%;width:100%;}.wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decoration:none;padding:calc(.667em + 2px) calc(1.333em + 2px);font-size:1.125em;}.wp-block-file__button{background:#32373c;color:#fff;text-decoration:none;}.entry-meta{display:none !important;}.home .entry-meta{display:none;}.entry-footer{display:none !important;}.home .entry-footer{display:none;}.site-header{--bindef--nav-branding-width-mobile:200px;--bindef--nav-branding-width:200px;}@media only screen and (min-width: 1280px){#off-canvas,.site-drawer{display:none !important;}nav.secondary-menu{display:block !important;}}@media only screen and (min-width: 1050px){nav.main-menu{display:block !important;}}@media only screen and (max-width: 1050px){nav#mega-menu{display:none !important;}}@media only screen and (max-width: 1280px) and (min-width: 1050px){#off-canvas .off-canvas-menu{display:none;}#off-canvas .off-canvas__bottom{flex:1 1 auto;display:flex;flex-direction:column;justify-content:space-between;}}.publish-date{display:none;}.byline{display:none;}.imgleft{text-align:left;}@media only screen and (min-width: 1200px){.bindef-vc-external-posts[data-theme="cards"] .bindef-vc-external-posts__posts .ext-post-card{width:0;}}