Elastic Security Labs · Scour

MaaS Appeal: An Infostealer Rises From The Ashes

elastic.co·42w

Taking SHELLTER: a commercial evasion framework abused in-the-wild

elastic.co·46w

Microsoft Entra ID OAuth Phishing and Detections

elastic.co·47w

A Wretch Client: From ClickFix deception to information stealer deployment

elastic.co·48w

Call Stacks: No More Free Passes For Malware

elastic.co·49w

Chasing Eddies: New Rust-based InfoStealer used in CAPTCHA campaigns

elastic.co·51w

De-obfuscating ALCATRAZ

elastic.co·52w

Misbehaving Modalities: Detecting Tools, Not Techniques

elastic.co·53w

Bit ByBit - emulation of the DPRK's largest cryptocurrency heist

elastic.co·54w

Now available: the 2025 State of Detection Engineering at Elastic

elastic.co·56w

Outlaw Linux Malware: Persistent, Unsophisticated, and Surprisingly Effective

elastic.co·59w

The Shelby Strategy

elastic.co·60w

Shedding light on the ABYSSWORKER driver

elastic.co·61w

AWS SNS Abuse: Data Exfiltration and Phishing

elastic.co·62w

Detecting Hotkey-Based Keyloggers Using an Undocumented Kernel Data Structure

elastic.co·63w

Linux Detection Engineering - The Grand Finale on Linux Persistence

elastic.co·64w

Emulating AWS S3 SSE-C Ransom for Threat Detection

elastic.co·65w

From South America to Southeast Asia: The Fragile Web of REF7707

elastic.co·66w

You've Got Malware: FINALDRAFT Hides in Your Drafts

elastic.co·66w

Linux Detection Engineering - Approaching the Summit on Persistence Mechanisms

elastic.co·66w

Log in to enable infinite scrolling