Aryaka Threat Research Lab

Blog Home > Featured Topic > Aryaka Threat Research Lab

Featured Topic: Aryaka Threat Research Lab

Peeling Back the Layers of PowerShell Loader: Tracing a Multi-Stage Windows Payload Chain
By Aditya K Sood and Bikash Dash | November 2, 2026 Aryaka Threat Research Lab analyzed a multi-stage Windows malware infection chain that starts with a PowerShell loader associate...
Read Post >
Critical PHP Vulnerabilities: What You Need to Know and How Aryaka Is Protecting Customers
Two critical PHP vulnerabilities highlight why proactive security, rapid response, and a unified approach to network protection matter more than ever. Cybersecurity threats continu...
Read Post >
Beyond the Batch File: A Look at a Multi-Stage DonutLoader Infection Chain
By Aditya K Sood and Bikash Dash | Aug 11, 2026 Aryaka Threat Research Lab examined a highly obfuscated Windows batch script that delivers Donut shellcode and installs a memory-res...
Read Post >
From ZIP File to crpx0 Ransomware: Anatomy of a Multi-Stage Attack
Aryaka Threat Research Labs has discovered a campaign that shows how simple user actions can trigger complex, multi-stage malware execution chains. In this campaign, attackers lure...
Read Post >
Kernel in the Crosshairs: The BlackSanta Threat Campaign Targeting Recruitment Workflows
The Resume that wasn’t a Resume It begins in one of the most trusted workflows inside any organization: hiring. An HR professional receives what appears to be a perfectly normal ...
Read Post >
Espionage Without Noise: Understanding APT36’s Enduring Campaigns
Critical infrastructure all over the world is under threat from highly organized, state-sponsored “espionage ecosystems”. These loosely knit but well-resourced organizations ar...
Read Post >
Phantoms in the Cloud: Fraudsters Exploit Google Cloud Storage for Deceptive Campaigns
It all began with a whisper—a few unassuming emails slipping into inboxes on an ordinary Tuesday morning. No bells, no whistles, nothing that would raise an eyebrow at first glan...
Read Post >
BatShadow: Vietnamese Threat Actor Expands Its Digital Operations
By Aditya K Sood | By Varadharajan K | Sept 25, 2025 Get the new Batshadow Threat Report or Explore Interactive Report Aryaka Threat Research Labs has identified a new campaign by ...
Read Post >
Vidar Malware is Back: New Aryaka Threat Research Report
Vidar, a well-known info-stealing malware, is making the rounds again with a few new tricks. In a new report, Aryaka’s Threat Research Lab dives into what’s happening and what ...
Read Post >
Wiley’s Internet Technology Letters Published Research on Generative AI for Adaptive Threat Hunting
Recently, we published a research piece in Wiley’s Internet Technology Letters on highlighting the importance of Generative (GenAI) for revolutionizing the adaptive threat huntin...
Read Post >
North Korea’s Kimsuky APT: A Stealthy Threat Adapting to the Evolving Digital World
By Aditya K Sood | By Varadharajan K | July 29, 2025 In today’s hyper-connected landscape, the traditional notion of a secure network perimeter is rapidly dissolving. State-s...
Read Post >
Fortifying Your Network: How Aryaka’s Unified SASE Shields Against Advanced Threats Like Remcos RAT
In the evolving landscape of cybersecurity, threats like Remcos RAT (Remote Access Trojan) have become increasingly sophisticated, leveraging stealthy techniques to infiltrate netw...
Read Post >