[/> 01
ON-CHAIN OBFUSCATION & CRYPTOCURRENCY LAUNDERING
Dive into on-chain obfuscation tradecraft and how to track laundered funds.
READ MORE ■ ▷OPEN >
NULL\SECTOR
RESEARCHES
[/> 02
Stack spoofing — researching new approaches
Known ideas and new ones for call stack spoofing on Windows, with and without CET.
READ MORE ■ ▷OPEN >
[/> 03
Coruna exploit kit — further investigations and reverse engineering
In early March 2026, GTIG found several domains delivering a sophisticated 1-click exploit chain for iOS and macOS — a reverse engineering and analysis of the kit.
READ MORE ■ ▷OPEN >
[/> 04
Poisoned null byte — heap exploitation and glibc internals
Exploiting an off-by-one with House of Einherjar for chunk overlapping and arbitrary pointers from malloc — plus glibc internals and its security mitigations.
READ MORE ■ ▷OPEN >
[/> 05
Secrets dumping from modern browsers
A deep dive on dumping secrets from modern Chromium-based browsers and bypassing App Bound Encryption.
READ MORE ■ ▷OPEN >
[/> 06
ELPACO ransomware — malware analysis
A variant of Mimic that allows the operator to use a GUI to interact with the program.
READ MORE ■ ▷OPEN >
[/> 07
SolarWinds breach — SUNBURST backdoor analysis
Back in 2020 SolarWinds was the victim of one of the largest breaches in history — an analysis of the threat actors' tooling, evasion and persistence mechanisms.
READ MORE ■ ▷OPEN >