Netcrook
01 June 2026
When the Loader Betrays the App: A .NET Trick That Can Hide in Plain Sight
A campaign tied to Screening Serpens shows how AppDomainManager abuse can turn a trusted .NET startup path into an early-stage hiding place for malware.
When the Startup Path Becomes the Attack Path
A reported .NET abuse chain shows how defenders can lose visibility before an application fully settles, especially when startup manipulation is paired with DLL sideloading and recruitment-themed lures.
When AI Becomes a Campaign Multiplier: The New Advantage in Cyber Operations
An FT-attributed allegation about Iran-linked actors using ChatGPT and Gemini points to a broader security shift: generative AI may be lowering the cost of phishing, translation, and reconnaissance, without changing the old logic of intrusion.
When the Backup Net Disappears, Recovery Turns Into a Crime Scene
A destructive campaign reportedly hit IT, backup, and recovery systems at multiple organizations, showing how modern intrusions can aim to erase the path back to normal operations.