Malware researchers – here’s how to download a browser extension without installing it.
Posted inLabs and Lessons

Malware researchers – here’s how to download a browser extension without installing it.

Downloading a browser extension without immediately installing it can be useful for offline installation, security analysis, or archival purposes. While most users add extensions directly through their browser’s web store, there are several professional methods to obtain the extension package file—typically a .crx file for Chrome and Edge—without triggering installation. Below, we outline the most effective approaches.
The computer hacker’s guide to the Russian language – how Russia’s language fits into cybercriminal campaigns.
Posted inReferences

The computer hacker’s guide to the Russian language – how Russia’s language fits into cybercriminal campaigns.

English-speaking hackers employ several strategies to target Russian-language systems, leveraging technical evasion, linguistic deception, and collaborative networks. For instance, Russian malware often avoids infecting systems with Cyrillic language settings to bypass local law enforcement. English hackers exploit this by adding Russian registry keys to mimic language settings without full installation, installing virtual Russian keyboards to trigger malware’s geo-avoidance, and using scripts to set system locales to ru-RU (e.g., via Windows batch commands).
Example Pentest/Red Team Exercise Policy
Posted inCheat Sheets

Example Pentest/Red Team Exercise Policy

This policy framework document provides guidance for managing a penetration testing program and performing penetration testing activities with the goal of improving defensive IT security for {Company Name}'s infrastructure, systems, services, and applications. This document defines the roles and responsibilities of {Company Name}'s executives, managers, and IT security team personnel as well as external third-party security service providers.