Blog

Research, analysis and news from the DeXpose team

Threat actor profiles, breach trackers, infostealer research and practical guidance for security teams.

Nov 25, 2025Infostealers Malware analysis

Inside Valkyrie Stealer: Capabilities, Evasion Techniques, and Operator Profile

What Is Valkyrie Stealer? Valkyrie Stealer is a C++ infostealer designed to collect credentials, system information, browser data, messaging-app sessions, and other user assets from Windows…

Sep 15, 2025Threat Actors Researches

Threat Actor Profile: APT27

Who is APT27? APT27 — also known as Emissary Panda, Iron Tiger, and LuckyMouse — is a Chinese state-sponsored cyber-espionage group active since at least 2010.…

Jul 9, 2025Cyber Crime Threat Actors

Threat Actor Profile: Mustang Panda

Mustang Panda is a highly persistent and adaptive Chinese state-linked cyber espionage group operational since at least 2012. Known by multiple aliases—including Red Delta, TA416, and…

Jun 23, 2025Malware analysis Researches

AnyDesk Clone Malware Drops Phemedrone Stealer Loader

On June 16, 2025, a suspicious domain impersonating AnyDesk — anydeske[.]icu — was reported on Twitter. The site served what appeared to be a legitimate remote access tool…

May 30, 2025Researches Threat actors Hunting

Uncovering Kimsuky APT Infrastructure | Threat Report

Summary Recently identified previously undetected Kimsuky (also known as Black Banshee) infrastructure through advanced pivoting techniques. Using HTTP header analysis, SSL Cert and JARM fingerprinting. We…

May 30, 2025Threat actors Hunting

Smishing Triad Impersonates Egypt Post in Phishing Scam

A recently observed phishing campaign impersonating Egypt Post (البريد المصري) has been attributed to the Smishing Triad, a well-documented cybercriminal group for their phishing (smishing) campaigns across multiple countries.…

Apr 11, 2025Infostealers Malware analysis

FleshStealer Malware Report – Multivector Data Theft

Introduction FleshStealer is a sophisticated, modular, and obfuscated .NET-based information-stealing malware designed for comprehensive data exfiltration from Windows systems. Its architecture is built for scale and…

Mar 17, 2025Infostealers Malware analysis

SalatStealer Malware Analysis and Data Theft Techniques

Introduction Salat Stealer is a stealthy malware developed in the Go programming language, designed to infiltrate systems and extract sensitive data. Once it infects a device,…

See your own exposure

Run a free dark web report for your domain: breached credentials, infostealer logs and dark web mentions in seconds.