Malware
Families, tooling, delivery chains, and detection guidance.
Ryuk — Targeted Ransomware Associated with Enterprise Intrusions
Ryuk is a targeted ransomware strain publicly associated with high-impact enterprise intrusions, often deployed following credential theft and lateral movement. This SECMONS profile provides structured analysis of Ryuk’s operational patterns, ecosystem relationships, and defensive implications.
TrickBot — Modular Banking Trojan and Malware Delivery Framework
TrickBot is a modular malware platform initially developed as a banking trojan and later expanded into a flexible intrusion framework used for credential theft, lateral movement, and ransomware staging. This SECMONS profile provides structured technical and operational analysis.
Emotet — Modular Loader & Botnet Malware Profile
Emotet is a modular malware platform that evolved from a banking trojan into a large-scale loader and botnet ecosystem, frequently used to deliver additional payloads including ransomware. This SECMONS profile provides structured analysis of Emotet’s capabilities, targeting patterns, and defensive implications.