Embee Research

Tracking Malicious Infrastructure Of the Vultur Banking Trojan.

Identifying malicious infrastructure through hardcoded TLS Certificates and Subdomains.

Finding phishing domains passive DNS tooling and 302 redirects.

Leveraging Passive DNS to identify APT infrastructure. Building on public intelligence reports.

Malware Infrastructure Tracking Using Passive DNS Intelligence.

Identifying and Removing Obfuscation in a Self-Referencing Latrodectus Loader

Advanced CyberChef techniques using Registers, Regex and Flow Control

Identifying malware infrastructure with the FOFA scanner.

Manual analysis of Cobalt Strike Shellcode with Ghidra. Identifying function calls and resolving API hashing.