Trellix on Aswath's Blog

Technical Deep Dive: The Monero Mining Campaign

Tue, 17 Feb 2026 00:00:00 +0000

Originally published on the Trellix Research Blog — Feb 17, 2026
Wayback Machine archive · Download PDF backup

A granular look at an infection cluster identified in late 2025 — tracing the attackers’ tradecraft, tooling, and operational security posture from the initial social-engineering lure all the way to the execution of privileged instruction sets in Ring 0.

The Ghost in the Machine: Unmasking CrazyHunter's Stealth Tactics

Tue, 06 Jan 2026 00:00:00 +0000

Originally published on the Trellix Research Blog — Jan 6, 2026
Wayback Machine archive · Download PDF backup

An in-depth analysis of CrazyHunter ransomware — a fork of the Prince ransomware that surfaced in mid-2024 — examining its network compromise techniques, anti-malware evasion mechanisms, and the full attack flow used against Taiwan healthcare systems.