Posts by m.farghaly

Unmasking Lawxsz: Attributing the Developer Behind Valkyrie and Prysmax Stealers

4 weeks ago

TL;DR This is Part 2 of our investigation into Lawxsz, an Argentinian threat actor behind the Valkyrie, Prysmax, and Packit stealers, along with several RATs and supporting cybercrime services. Where…

Unmasking Quellostanco: How a Git Commit Exposed a Threat Actor Targeting Egyptian Infrastructure

Cyber Crime, Dark Web monitoring, Threat Actors

1 month ago

TL;DR In early 2026, a threat actor using the alias Quellostanco ran a campaign against Egyptian targets: airlines, an aluminium company, a government roads authority, multiple universities, and a national…

Inside Combolists: the Downstream Cybercrime Economy

Cyber Crime, Infostealers, Researches

2 months ago

In the last blog, we examined how combolists are built from the raw sources (breach dumps, infostealer logs, and SQLi mass exploitation), the curation process, and how they fuel credential…

Chinese Smishing Campaign | How a Large-Scale Phishing Kit Is Targeting 80+ Brands Across 20 Countries

Researches, Cyber Crime, Threat Actors

2 months ago

TL;DR We have been tracking a large-scale Chinese smishing campaign targeting multiple regions and industries with primary focus on telecom providers, toll road system, postal services and banks. The campaign…

Inside Combolists: How Hackers Build Stolen Credential Data

Cyber Crime, Privacy and security

4 months ago

Digital identity is now one of the easiest entry points into an organization, as data breaches often stem from weak, reused, or stolen credentials. Attackers exploit this through credential stuffing,…

Deep Dive into Arkanix Stealer and its Infrastructure

Infostealers, Malware analysis, Researches

6 months ago

Arkanix Stealer is an actively developed credential‑theft malware family that is primarily advertised on Discord, where its operators have been promoting rapid updates and new feature additions. While the initial…

Inside Valkyrie Stealer: Capabilities, Evasion Techniques, and Operator Profile

Infostealers, Malware analysis, Researches, Threat Actors

7 months ago

What Is Valkyrie Stealer? Valkyrie Stealer is a C++ infostealer designed to collect credentials, system information, browser data, messaging-app sessions, and other user assets from Windows systems. It features a…

Threat Actor Profile: APT27

Threat Actors, Researches

9 months ago

Who is APT27? APT27 — also known as Emissary Panda, Iron Tiger, and LuckyMouse — is a Chinese state-sponsored cyber-espionage group active since at least 2010. The group has been…

Get Free Exposure Report

Dark Web monitoring

Breaches monitoring

Attack surface mapping

Brand Protection

Supply Chain Monitoring

Got a Special Request?

MSPs Partnership

Offensive Security

Data Partnership (API)

Free Darkweb Report

Email Data Breach Scan

Oracle Breach Check

Intel feeds

Blog

Knowledge Hub