LausivLoader analysis, or how to pass data between malware stages, (Thu, Sep 17th)

Imported from official source

Cybersecurity Classified by Officially

At the end of August, a malspam message was caught in the quarantine of a mail gateway operated by one of my customers. The message was not especially remarkable – it asked the recipient to review some attached requirements and provide a price quotation for a fiber optic system and appeared to impersonate an employee of a legitimate company.

Read the original at the source: https://isc.sans.edu/diary/rss/33348

Officially imported this from SANS Internet Storm Center’s own source. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

This publication has changed since it was first published

2 versions recorded. The original is kept in full — nothing is overwritten.

  1. v2 imported change on current
  2. v1 as first published on

Provenance

Organization
SANS Internet Storm Center — imported from official source
Official source
https://isc.sans.edu/rssfeed.xml RSS
Imported
September 18, 2026 11:34
Versions
2 recorded
Identity
https://isc.sans.edu/diary/rss/33348

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.