Avast's threat research blog, with technical reports on malware, rootkits, zero-days, and attacks on software update channels.
HN links it for original malware analyses such as the ransomed coffee machine, eScan update backdoor, and Lazarus rootkit, often as the better primary source.
US Commission on International Religious Freedom
> While we have no information on the impact of this attack or the actions taken by the attackers, based on our analysis of the files in question, we believe it’s reasonable to conclude that the attackers were able to intercept and possibly exfiltrate all local network traffic in this organization. This could include information exchanged with other US government agencies and other international governmental and nongovernmental organizations (NGOs) focused on international rights. We also have indications that the attackers could run code of their choosing in the operating system’s context on infected systems, giving them complete control.
https://decoded.avast.io/threatintel/avast-finds-backdoor-on-us-government-commission-network/
I dug around a little bit and couldn't find a source supporting either of our claims. I did find verified examples of crypto miners in cracked software[0]. I think the threat landscape for cracks has probably changed with the rise of crypto mining.
0. https://decoded.avast.io/danielbenes/crackonosh-a-new-malware-distributed-in-cracked-software/
Technical report,
https://news.ycombinator.com/item?id=40133680
https://decoded.avast.io/janrubin/guptiminer-hijacking-antivirus-updates-for-distributing-backdoors-and-casual-mining/
Source with technical details: https://decoded.avast.io/janvojtesek/putting-an-end-to-retadup-a-malicious-worm-that-infected-hundreds-of-thousands/
Saved you a click
https://decoded.avast.io/martinhron/the-fresh-smell-of-ransomed-coffee/
Original link from the article, perhaps a better source?
Original post: https://decoded.avast.io/martinhron/the-fresh-smell-of-ransomed-coffee/