A breakdown of how PHP droppers are used to spread binary malware through malicious URLs and spam emails.

A breakdown of a PHP skimmer found across multiple websites and injected into the Magento core file app/bootstrap.php.

Hi my name is Spox (Dila Belimi) and I like to steal from average people during a global pandemic.

A phishing kit targeting both the login information and also the API key for Vonage API users (previously Nexmo). The stolen API can then be used to send and receive SMS, or even calls, from a large selection of clean numbers.

A JavaScript skimmer loading from a fake CSS request to URL printcss[.]host/styles.css which was injected into the Magento 2 database table cms_block.content.