Latest
Tag: fake-windows-update
CloakGuard: a signed “remote management” agent that fakes a blue screen while someone uses your PC
A code-signed Go agent calling itself CloakGuard hides as SgrmBroker.exe, makes itself unkillable, can disable Defender, and paints a fake blue screen the operator can see straight through.…
The “Windows Update” That Writes Down Your Password
A signed fake Windows Update prompt that saves every password typed into it, wrong ones included, and shares an EV certificate with a hidden Xray tunnel DLL.
About
Rogue Authority LLC — cybersecurity consulting and open-source tooling for the security community.
View Projects