Threat intel | 17 min read
The history of AppSuite: the certs of the BaoLoader developer

We're tracking the malware BaoLoader and their fraudulent code-signing certificates via AppSuite-PDF and PDF editor campaigns.

Threat intel | 10 min read
You don’t find ManualFinder, ManualFinder finds you

We're investigating ManualFinder, a trojan malware we're seeing in new activity, likely coming from potentially unwanted programs (PUPs).

Threat intel | 2 min read
An important update (and apology) on our PoisonSeed blog

An important update and apology on the Expel blog, for a blog we published on PoisonSeed on July 17, 2025.