Curated security research, vulnerabilities, advisories and tools for practitioners.

#persistence

Security coverage tagged persistence.

1.

Three’s a Crowd: TeamPCP trojanizes LiteLLM in Continuation of Campaign

blog | 2026-03-24 18:40 | wiz.io | original ↗ | #cloud | #supply-chain | #malware

2.

Exposed BYOB C2 Infrastructure Reveals a Multi-Stage Malware Deployment

blog | 2026-01-28 00:00 | hunt.io | original ↗ | #attack-chains | #malware | #threat-hunting

3.

AsyncRAT Campaigns Uncovered: How Attackers Abuse ScreenConnect and Open Directories

blog | 2025-09-18 00:00 | hunt.io | original ↗ | #malware | #persistence | #screenconnect

4.

APT MuddyWater Targets CFOs with Multi-Stage Phishing & NetBird Abuse

blog | 2025-08-20 00:00 | hunt.io | original ↗ | #phishing | #social-engineering | #apt

5.

JSPSpy and ‘Filebroser’: A Custom File Management Tool in Webshell Infrastructure

blog | 2025-03-11 00:00 | hunt.io | original ↗ | #infrastructure | #webshell | #persistence

6.

How to Defend Against SID History Injection

blog | 2024-05-03 20:16 | semperis.com | original ↗ | #active-directory | #privilege-escalation | #defense

7.

‘I stay on targets for a long, long time’: Chackal and Serizao on passion, persistence and partnerships in Bug Bounty

blog | 2024-03-13 09:06 | yeswehack.com | original ↗ | #bug-bounty | #interview | #collaboration

8.

Hiding in Plain Sight — Discovering Hidden Active Directory Objects

incident | 2022-03-30 09:23 | semperis.com | original ↗ | #active-directory | #detection | #persistence

9.

Active Directory Security: Abusing Display Specifiers

blog | 2021-05-20 19:53 | semperis.com | original ↗ | #active-directory | #privilege-escalation | #attack-technique

10.

New Research: Detecting DCShadow on Rogue Hosts

blog | 2020-11-16 15:40 | semperis.com | original ↗ | #active-directory | #detection | #research

11.

Why Most Organizations Still Can’t Defend against DCShadow

blog | 2019-07-16 19:15 | semperis.com | original ↗ | #active-directory | #backdoor | #mimikatz