Threat Labs

https://filescanio.github.io/Threat LabsThreat Labs is a threat research team dedicated to uncovering the latest cyber threats focusing on malware analysis, reverse engineering, and cutting-edge detection techniques. 2026-07-17T15:25:04+00:00 FileScan's Threat Labs https://filescanio.github.io/ Jekyll © 2026 FileScan's Threat Labs /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png Inside a Pre-Deployment Syntrix Campaign2026-05-25T00:00:00+00:00 2026-05-25T00:00:00+00:00 https://filescanio.github.io/posts/Syntrix-RAT-analysis/ FileScan's Threat Labs

FileScan.io captured a complete four-stage delivery chain for a Quasar-based RAT before the operator replaced its loopback C2. 0/21 AV detections. Here is what we found.

Christmas themed attacks are here!2025-12-19T07:00:00+00:00 2025-12-23T13:49:35+00:00 https://filescanio.github.io/posts/Christmas-time!/ FileScan's Threat Labs

OPSWAT discovered a barely documented malware-as-a-service now using opportunistic Christmas themes. This loader framework leverages steganography and several layers in the infection chain before dropping the final payload, commnly commodity RATs.

Detecting Malware in AI Models with Filescan.io2025-09-24T07:00:00+00:00 2025-09-24T07:00:00+00:00 https://filescanio.github.io/posts/Detecting-malware-in-AI-Models-with-Filescanio/ FileScan's Threat Labs

With the rise of AI adoption, malicious AI models are emerging as a new vector in real-world attack campaigns. This blog explores how threat actors leverage AI to make it become real threats — and how emulation-based sandbox ultilizes pickle scanning tools, disassembly code analysis to deal with these Malicious models and detect advanced evasion techniques used in the wild

MetaDefender Sandbox and AI: Redefining Threat Detection2025-02-21T07:00:00+00:00 2025-03-14T14:04:43+00:00 https://filescanio.github.io/posts/Sandbox-and-AI/ FileScan's Threat Labs

Discover how AI-powered services enhance our sandbox, enabling advanced detection capabilities. We explore intricate details, showcase real-world cases, and demonstrate how AI-driven features dynamically adapt to evolving threats with precision.

New JavaSquid Malware Family: Uncovering an Opportunistic Malware Campaign with FileScan.io2024-11-11T07:00:00+00:00 2024-11-11T07:00:00+00:00 https://filescanio.github.io/posts/JavaSquid-research/ FileScan's Threat Labs

OPSWAT discovered JavaSquid, a new malware family using fake AI software to infect systems. The campaign, ongoing since mid-July 2024, uses evasive JavaScript techniques and links to previous attacks with stolen digital certificates from Chinese companies. Insights gained have enhanced OPSWAT's MetaDefender Sandbox capabilities.