Skip to content
The Gentlemen: How GentleKiller Clears the Path to Encryption
The Gentlemen turns ransomware, data theft, and defense evasion into a managed service for affiliates, with cross-platform encryptors and a 90 percent revenue share.
MedusaHVNC: A Hidden Desktop That Steals Live Windows Sessions
MedusaHVNC is a newly uncovered hidden desktop malware family that gives operators access to live, logged-in browser sessions on a victim’s Windows device.
How the Kettering Health Ransomware Attack Disrupted Patient Services
Learn how the Kettering Health ransomware attack disrupted patient services, impacted healthcare operations, and caused cybersecurity issues.
Lazarus Group Cyber Attacks: What Businesses Need To Know
Learn who the Lazarus Group is, the major cyberattacks linked to it, and how your organization can defend against this nation-state threat.
Inside OnyxC2: The New Stealer Targeting 210 Apps
Discover OnyxC2, the new malware-as-a-service stealer targeting 210 apps. Learn how it evades detection, steals credentials, and enables data theft.
Venom Stealer Turns ClickFix Into a Full Exfiltration Pipeline
BlackFog analyzes Venom Stealer, a new MaaS infostealer that uses ClickFix delivery to launch an automated exfiltration pipeline covering credential theft, wallet cracking, and fund sweeping.
Steaelite RAT Enables Double Extortion Attacks from a Single Panel
Steaelite is a newly emerging RAT that unifies credential theft, data exfiltration, and ransomware in a single web panel, accelerating double extortion attacks.
ClawdBot and OpenClaw: When Local AI Becomes A Data Exfiltration Goldmine
ClawdBot stores API keys, chat histories, and user memories in plaintext files, and infostealers like RedLine, Lumma, and Vidar are already targeting it.
Installing BlackFog for macOS using Microsoft Intune
This is a guide on how to install and deploy BlackFog’s macOS Agent via the Microsoft Intune endpoint management solution. This guide provides instructions based on Microsoft Intune process. Other MDM solutions may have a different process. Step 1: Download Package Download BlackFog for macOS in the Package format (PKG). You can [...]
How to Correctly Remove Devices from the BlackFog Console
When managing the IT assets of your organization, it's essential to know how to effectively remove devices from your BlackFog Enterprise Console. This process not only ensures security by preventing unauthorized access once a device is no longer in use but also allows for the reuse of licenses, which can be crucial for maintaining cost-efficiency. [...]
Fast Flux Attacks Explained and How to Prevent Data Exfiltration
Find out how "fast fluxing," a technique used by cybercriminals and rogue nations to hide their online actions, poses a risk to national security and how BlackFog's technology stops sensitive data from being stolen.
BlackFog and Windows S mode
BlackFog requires a full edition of Windows in order to operate correctly. Restricted versions such as Windows S are insufficient as they limit third party installations outside of the app store. If you are running Windows S or Windows in S Mode you will need to switch to the full version of Windows which is [...]