Malware articles
Articles, checklists and expert guidance on malware from Aesparrow's penetration testers, auditors and compliance consultants.
Articles
Malicious npm Packages: Software Supply Chain Attack Risks
Malicious npm packages can disguise malware as legitimate development tools and compromise developer machines through hidden code and native components. Learn how software supply chain attacks can expose credentials, source code, and cloud access, and how organizations can verify dependencies…
Russian APT28 Targets NATO Organizations: Malware and Credential Theft
APT28 Targets NATO Organizations in a reported cyber espionage campaign involving the HOOKEDGE backdoor, credential theft, SSH tunnels, and a previously undocumented loader. Explore the reported attack techniques, potential security implications, and practical steps organizations can take to…
Let’s find the gaps before someone else does.
Tell us what you need tested for a fixed-scope quote, or talk it through with an Aesparrow practitioner — no obligation, no sales script.