While You Were Fearing Max, RuStore Was Already on Your Phone
You can choose not to install Max. RuStore is already on every phone — collecting data about your apps, geolocation, and keyboard input.
Scam Stack — Cyber Threat Investigations
ERMAC 3.0: Dissecting a Banking Trojan from the Inside
I got my hands on the source code of the ERMAC 3.0 banking trojan. Here's how it steals crypto wallets, intercepts SMS messages, swaps addresses in the clipboard — and why its authors still won't land a job at any legitimate company.
Currency Pair Scanners: How Arbitrage Scams Work and Why Your Money Is Already Lost
Breaking down the scheme with fake crypto exchanges that promise profits from arbitrage — how the funnel works and why your money will not be returned.
Why VPN Won't Save You: How Whonix Works and How to Build Your Own VPN Gateway with Traffic Isolation
A VPN client on your computer is just software that can be bypassed. Whonix solves this through physical isolation: the workstation has no direct internet access. We break down the principle and build our own version with a fast VPN instead of Tor.
Tyupkin: How Russian Hackers Taught ATMs to Give Away Money for Free
Or the story of how a bootable CD, Windows XP, and human laziness created the perfect crime