Latest
Tag: credential-theft
A signed “crash handler” that only wakes up under the right name
A signed loader that does nothing unless it is named CrashHandler.exe or Updater.exe, talks to its server with forgery-proof replies, hides its payload as Logo.png, and delivers the…
The “Windows Update” That Writes Down Your Password
A signed fake Windows Update prompt that saves every password typed into it, wrong ones included, and shares an EV certificate with a hidden Xray tunnel DLL.
About
Rogue Authority LLC — cybersecurity consulting and open-source tooling for the security community.
View Projects