← BACK

RESEARCH ARCHIVE / LATEST FIELD NOTES

Articles

Excel Shared Document Phishing Kit

Aug 21, 2026

Analysis

9 MIN READ

Microsoft Excel “Shared Document” cred harvester featuring multi-attempt password capture, aggressive anti-analysis code, and a Supabase-backed campaign backend.

Homebrew ClickFix via Google Sites

Aug 20, 2026

Analysis

8 MIN READ

Analysis of a multi-stage AMOS/Camelot macOS stealer delivered via Google Ads → fake Homebrew page on Google Sites.