Malware

2 posts

When "ollama.js" Isn't Ollama
Jun 23, 2026 8 min read Intermediate
Threat Hunting Incident Response Malware Deno Stealer
I almost didn’t look twice at this one. The file was named ollama.js, and the machine it came off had a working Ollama install sitting right there. Everything lined up with someone setting up a …
Read More
Active Node.js Malware Campaign Targeting Manual Reader Applications
Oct 21, 2025 2 min read Intermediate
Threat Hunting Incident Response Malware Node.js EDR
We’re seeing a significant uptick in a malware campaign that’s affecting multiple customers. This one’s worth knowing about if you’re in a SOC or working with EDR platforms. …
Read More