Cyber security / independent research

Wire on flames, all fights are lost.

Research without a fixed perimeter. I follow the question—through malware, infrastructure, applications, adversary behavior, and wherever the signal leads.

Priority defines the perimeter

The main thing is to keep the main thing the main thing. Everything else is attack surface.

01 / SELECTED RESEARCH

From the archive

One signal from a much wider surface.

Team research Android / Malware Public archive

Cerberus Banking Trojan Analysis

An investigation into the Cerberus malware-as-a-service operation and one of the most capable Android banking trojans of its era.

The research traces its operators, anti-analysis techniques, persistence, accessibility abuse, command-and-control behavior, remote control capabilities, injection overlays, indicators of compromise, and defensive countermeasures.

Research team
3 researchers
Observed scope
160+ targeted apps
Local artifact
PDF · 5.58 MB

Next node

blog.catakan.net

A future home for original research, field notes, and findings. Offline until there is something worth transmitting.

Reserved / dormant

02 / EXTERNAL SIGNALS

Elsewhere on the wire

Presence, not contact.