Latest

Tag: CODE LOFTS d.o.o.

— Malware Analysis

A signed “Google Workspace” installer that doesn’t know where it’s going

An EV-signed MSIX posing as Google Workspace carries no server address: a tiny .appinstaller file on workspacedriver[.]live supplies it, along with Microsoft's real runtime, and the app then…

About

Rogue Authority LLC — cybersecurity consulting and open-source tooling for the security community.

View Projects