Latest
Blog
The “Windows Update” That Writes Down Your Password
A signed fake Windows Update prompt that saves every password typed into it, wrong ones included, and shares an EV certificate with a hidden Xray tunnel DLL.
The PDF Viewer That Makes Sandboxes Wait It Out
A signed "PDF viewer" that guesses its own key 3.7 billion times to outlast sandboxes, then hides a DHT-and-DGA backdoor inside Windows Explorer.
Using the Cert Graveyard
We published a blog here: https://squiblydoo.blog/2026/06/22/using-the-cert-graveyard/ This blog discusses the ways to leverage the Cert Graveyard as well as shares statistics on usage. Check out the blog above…
About
Rogue Authority LLC — cybersecurity consulting and open-source tooling for the security community.
View Projects