Archive - Securityinbits

32 Ransomware Groups Abuse AnyDesk. Your EDR Sees a Legit Tool

Is That AnyDesk Legit or Planted? A Lab-Validated Hunt

Jul 29 • Ayush Anand

June 2026

Detecting Reverse SSH SOCKS Tunnels: Separating Benign -R From Akira Pivoting

Your EDR sees one process: ssh.exe. Here's how to read the shape it leaves behind.

Jun 17 • Ayush Anand

Hunt Ransomware Before It Encrypts: The Three Tools 45+ Gangs Reach For

Six queries for MDE and Elastic that catch NetScan, Advanced IP Scanner, and Advanced Port Scanner pre-encryption.

Jun 6 • Ayush Anand

#nojs-banner { position: fixed; bottom: 0; left: 0; padding: 16px 16px 16px 32px; width: 100%; box-sizing: border-box; background: red; color: white; font-family: -apple-system, "Segoe UI", Roboto, Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-size: 13px; line-height: 13px; } #nojs-banner a { color: inherit; text-decoration: underline; } This site requires JavaScript to run correctly. Please turn on JavaScript or unblock scripts