--- title: Morphisec Cybersecurity Blog | Nadav Lorber description: Nadav Lorber is leading the security research team on the Morphisec Labs. --- Recent Webinar: Building an Adaptive Cyber Resilient Cloud ![arrow-white](https://www.morphisec.com/hubfs/arrow-white.svg) ![arrow-white](https://www.morphisec.com/hubfs/arrow-white.svg) [![Watch now](https://no-cache.hubspot.com/cta/default/1534169/6359793e-b232-4b79-9da5-b929fc3dc7aa.png)](https://cta-redirect.hubspot.com/cta/redirect/1534169/6359793e-b232-4b79-9da5-b929fc3dc7aa) ![close](https://www.morphisec.com/hubfs/close.svg) ![search_icon](https://www.morphisec.com/hubfs/search_icon.svg) [![Morphisec-Logo](https://www.morphisec.com/hubfs/Morphisec-Logo.svg "Morphisec-Logo")](http://www.morphisec.com) ![blog](https://www.morphisec.com/hubfs/blog.svg) [![Read the Blog](https://no-cache.hubspot.com/cta/default/1534169/3c83d6d5-0c56-47b7-8aee-ae6edf73c360.png)](https://cta-redirect.hubspot.com/cta/redirect/1534169/3c83d6d5-0c56-47b7-8aee-ae6edf73c360) [![Get A Demo](https://no-cache.hubspot.com/cta/default/1534169/d4f17ebf-d8a2-49c3-9bca-a8f8112b45f3.png)](https://cta-redirect.hubspot.com/cta/redirect/1534169/d4f17ebf-d8a2-49c3-9bca-a8f8112b45f3) [![Morphisec-Logo](https://www.morphisec.com/hubfs/Morphisec-Logo.svg "Morphisec-Logo")](http://www.morphisec.com) ![search_icon](https://www.morphisec.com/hubfs/search_icon.svg) - ![blog](https://www.morphisec.com/hubfs/blog.svg) [![Read the Blog](https://no-cache.hubspot.com/cta/default/1534169/3c83d6d5-0c56-47b7-8aee-ae6edf73c360.png)](https://cta-redirect.hubspot.com/cta/redirect/1534169/3c83d6d5-0c56-47b7-8aee-ae6edf73c360) - [![Get A Demo](https://no-cache.hubspot.com/cta/default/1534169/d4f17ebf-d8a2-49c3-9bca-a8f8112b45f3.png)](https://cta-redirect.hubspot.com/cta/redirect/1534169/d4f17ebf-d8a2-49c3-9bca-a8f8112b45f3) # BLOGS By Nadav Lorber Cybersecurity News, Threat Research, and more from the Team Spearheading the Evolution of Endpoint Security ## [CoinLurker: The Stealer Powering the Next Generation of Fake Updates](https://1534169.hs-sites.com/coinlurker-the-stealer-powering-the-next-generation-of-fake-updates) Posted by [Nadav Lorber](https://1534169.hs-sites.com/author/nadav-lorber) on December 16, 2024 [![CoinLurker The stealer powering the next generation of fake updates](https://www.morphisec.com/hubfs/CoinLurker%20The%20stealer%20powering%20the%20next%20generation%20of%20fake%20updates.png) ](https://1534169.hs-sites.com/coinlurker-the-stealer-powering-the-next-generation-of-fake-updates) The evolution of fake update campaigns has advanced significantly with the emergence of CoinLurker, a sophisticated stealer designed to exfiltrate data while evading detection. Written in Go, CoinLurker employs cutting-edge obfuscation and... [Read More **](https://1534169.hs-sites.com/coinlurker-the-stealer-powering-the-next-generation-of-fake-updates) ## [New Jupyter Evasive Delivery through MSI Installer](https://1534169.hs-sites.com/new-jupyter-evasive-delivery-through-msi-installer) Posted by [Nadav Lorber](https://1534169.hs-sites.com/author/nadav-lorber) on September 21, 2021 [![Jupyter Infostealer Delivery through MSI Installer](https://blog.morphisec.com/hubfs/2021%20Jupyter%20%20copy%202-1.jpg) ](https://1534169.hs-sites.com/new-jupyter-evasive-delivery-through-msi-installer) In 2020, Morphisec introduced the [Jupyter infostealer](https://1534169.hs-sites.com/jupyter-infostealer-backdoor-introduction), a .NET attack that primarily targets Chromium, Firefox, and Chrome browser data while also maintaining the additional capabilities of a backdoor.  [Read More **](https://1534169.hs-sites.com/new-jupyter-evasive-delivery-through-msi-installer) ## [Revealing the Snip3 Crypter, a Highly Evasive RAT Loader](https://1534169.hs-sites.com/revealing-the-snip3-crypter-a-highly-evasive-rat-loader) Posted by [Nadav Lorber](https://1534169.hs-sites.com/author/nadav-lorber) on May 7, 2021 [![Snip3 Crypter](https://blog.morphisec.com/hubfs/SNIP3%20Featured%20Image.png) ](https://1534169.hs-sites.com/revealing-the-snip3-crypter-a-highly-evasive-rat-loader) Morphisec has recently monitored a highly sophisticated Crypter-as-a-Service that delivers numerous RAT families onto target machines. The Crypter is most commonly delivered through phishing emails, which lead to the download of a visual basic file.... [Read More **](https://1534169.hs-sites.com/revealing-the-snip3-crypter-a-highly-evasive-rat-loader) ## [Tracking HCrypt: An Active Crypter as a Service](https://1534169.hs-sites.com/tracking-hcrypt-an-active-crypter-as-a-service) Posted by [Nadav Lorber](https://1534169.hs-sites.com/author/nadav-lorber) on March 16, 2021 [![HCrypt: Crypter as a Service](https://www.morphisec.com/hubfs/HCrypt-Featured.png) ](https://1534169.hs-sites.com/tracking-hcrypt-an-active-crypter-as-a-service) In 2021 Morphisec identified increased usage of the “HCrypt” crypter. In this post, we lockpick “HCrypt”—a crypter as a service marketed as a FUD (fully undetectable) loader for the client's RAT of choice. We chose to dissect the crypter’s... [Read More **](https://1534169.hs-sites.com/tracking-hcrypt-an-active-crypter-as-a-service) ## [CinaRAT Resurfaces With New Evasive Techniques](https://1534169.hs-sites.com/cinarat-resurfaces-with-new-evasive-tactics-and-techniques) Posted by [Nadav Lorber](https://1534169.hs-sites.com/author/nadav-lorber) on February 5, 2021 [![Cinarat](https://www.morphisec.com/hubfs/CinaRAT%20Resurfaces.png) ](https://1534169.hs-sites.com/cinarat-resurfaces-with-new-evasive-tactics-and-techniques) ## Introduction In this post, we cover the CinaRAT loader's evasive tactics, techniques, and procedures (TTPs), as identified and prevented by Morphisec’s zero-trust endpoint security solution powered by Moving Target Defense technology.  [Read More **](https://1534169.hs-sites.com/cinarat-resurfaces-with-new-evasive-tactics-and-techniques) [ All posts ](https://1534169.hs-sites.com/all) ### Subscribe to our blog Stay in the loop with industry insight, cyber security trends, and cyber attack information and company updates. [![New call-to-action](https://no-cache.hubspot.com/cta/default/1534169/e098d357-1710-4cfe-8901-19c93de122f4.png)](https://cta-redirect.hubspot.com/cta/redirect/1534169/e098d357-1710-4cfe-8901-19c93de122f4) ### Search Our Site ### Recent Posts ### Posts by Tag - [Automated Moving Target Defense (157)](https://1534169.hs-sites.com/topic/automated-moving-target-defense) - [Threat Research (135)](https://1534169.hs-sites.com/topic/threat-research) - [Cyber Security News (132)](https://1534169.hs-sites.com/topic/cyber-security-news) - [Morphisec Labs (127)](https://1534169.hs-sites.com/topic/morphisec-labs) - [Morphisec News (54)](https://1534169.hs-sites.com/topic/morphisec-news) - [Adaptive Exposure Management (14)](https://1534169.hs-sites.com/topic/adaptive-exposure-management) - [Defense-in-Depth (13)](https://1534169.hs-sites.com/topic/defense-in-depth) - [Ransomware (12)](https://1534169.hs-sites.com/topic/ransomware) - [Preemptive Security (11)](https://1534169.hs-sites.com/topic/preemptive-security) - [Gartner (10)](https://1534169.hs-sites.com/topic/gartner) - [Continuous Threat Exposure Management (CTEM) (9)](https://1534169.hs-sites.com/topic/continuous-threat-exposure-management-ctem) - [Microsoft (8)](https://1534169.hs-sites.com/topic/microsoft) - [In-Memory Attacks (7)](https://1534169.hs-sites.com/topic/in-memory-attacks) - [Healthcare Cybersecurity (6)](https://1534169.hs-sites.com/topic/healthcare-cybersecurity) - [Advanced Threat Defense (5)](https://1534169.hs-sites.com/topic/advanced-threat-defense) - [Financial Cybersecurity (5)](https://1534169.hs-sites.com/topic/financial-cybersecurity) - [Legacy Security (5)](https://1534169.hs-sites.com/topic/legacy-security) - [Artificial Intelligence (4)](https://1534169.hs-sites.com/topic/artificial-intelligence) - [Linux Cybersecurity (4)](https://1534169.hs-sites.com/topic/linux-cybersecurity) - [Fileless Malware (3)](https://1534169.hs-sites.com/topic/fileless-malware) - [Threat and Vulnerability Management (2)](https://1534169.hs-sites.com/topic/threat-and-vulnerability-management) - [Managed Service Providers (1)](https://1534169.hs-sites.com/topic/managed-service-providers) [See all](https://1534169.hs-sites.com/author/nadav-lorber#) - [![X](https://1534169.hs-sites.com/hubfs/x_twitter_icon.svg)](https://twitter.com/morphisec) - [![Linkedin](https://1534169.hs-sites.com/hubfs/linkedin_icon.svg)](https://www.linkedin.com/company/morphisec) - [![Youtube](https://1534169.hs-sites.com/hubfs/youtube_icon.svg)](https://www.youtube.com/channel/UCe48cR5xTxPJSYMjG-So7Rw) © 2026 Morphisec Ltd. | All rights reserved ![iso27001-(2)](https://www.morphisec.com/hubfs/iso27001-(2).png)