Malware | Detection.FYI

FunkLocker Ransomware File Creation

Sep 22, 2025 · attack.t1486 detection.emerging-threats ·
Share on:

Detects the creation of files with the ".funksec" extension, which is appended to encrypted files by the FunkLocker ransomware.

Read More
Katz-Stealer

May 26, 2025 ·
Share on:

Read More
Kalambur Backdoor Curl TOR SOCKS Proxy Execution

Feb 17, 2025 · attack.command-and-control attack.t1090 attack.t1573 attack.t1071.001 attack.t1059.001 attack.s0183 detection.emerging-threats ·
Share on:

Detects the execution of the "curl.exe" command, referencing "SOCKS" and ".onion" domains, which could be indicative of Kalambur backdoor activity.

Read More