News

VMRay Labs Note. By Emre Güler, VMRay Labs. 01.09.2026. Key finding. A single artifact left in a binary during compilation, a developer’s home directory path, connected a Rust-based infostealer that VMRay Labs calls “Zer0day Stealer” to a separate HVNC remote-control tool and to a recently reported ransomware family, ENIGMA Locker.

VMRay Labs Note. By Emre Güler, VMRay Labs. 10.08.2026. Key finding. VMRay Labs analyzed a malicious Chrome extension, dropped alongside the Stealc infostealer by a loader likely written in Rust, that impersonates Google Translate and turns the victim’s own browser into a remote-controlled tool for the attacker. Its most notable

When malware tries to disappear, it leaves a trail At the 38th Annual FIRST Conference in Denver, VMRay Labs’ Patrick Staubmann presented two sessions on how attackers hide, inside trusted SaaS platforms and from the sandbox itself, and how defenders can turn both into detection. DENVER, 28.06.2026. Two of the

Following a single RedLine Stealer indicator, VMRay Labs surfaced a tailored business email compromise campaign against the maritime sector, and a cluster of attacker-owned domains that defenders can block today. Threat Intelligence Report. 30 June 2026. Approximately a 9-minute read. Key finding. Most threat intelligence work starts with a feed