Techniques and Write-ups
- A Closer Look at Malware From the Macfinger ClickFix Campaign, (Fri, Sep 25th) - Introduction SANS ISC
Tools and Exploits
- Introducing Ghostwriter Skills - For all the people who still have to write reports SpecterOps
- Loupe: An Android Console in the Browser - Looks useful for android testing Hack.Learn.Share
New to Me and Miscellaneous
- Malicious npm Packages That Evade Defenses - This is an impressive piece of malware. Its sophistication says nation-state to me, but there is no direct evidence and certainly no attribution. Schneier on Security
Techniques, tools, and exploits linked in this post are not reviewed for quality or safety. Do your own research and testing.