https://scanmalware.com/blog Technical insights on web security, malware detection, certificate validation, and threat intelligence from ScanMalware.com en-us Thu, 02 Apr 2026 00:00:00 GMT https://scanmalware.com/scanmalware.svg https://scanmalware.com/blog https://scanmalware.com/blog/introducing-smql-query-language https://scanmalware.com/blog/introducing-smql-query-language ScanMalware Query Language (SMQL) is a powerful search syntax for querying our entire scan database. Combine 120+ filters across TLS certificates, JavaScript analysis, WHOIS data, malware detection, and more with boolean logic and comparison operators. Thu, 02 Apr 2026 00:00:00 GMT noreply@scanmalware.com (ScanMalware Research Team) smql search query-language threat-hunting security-research https://scanmalware.com/blog/stable-behavioral-signatures https://scanmalware.com/blog/stable-behavioral-signatures ScanMalware introduces two new behavioral fingerprinting algorithms that cluster JavaScript by runtime behavior patterns rather than exact code matching. Stable signatures bucket API usage into categories for deterministic grouping, while behavior vectors enable continuous similarity scoring across scans. Mon, 30 Mar 2026 00:00:00 GMT noreply@scanmalware.com (ScanMalware Research Team) javascript-analysis behavioral-fingerprinting malware-detection similarity-search machine-learning https://scanmalware.com/blog/coruna-ios-exploit-kit-detection https://scanmalware.com/blog/coruna-ios-exploit-kit-detection ScanMalware adds 16 new YARA detection rules for Coruna (CryptoWaters), the nation-state-grade iOS exploit kit targeting Safari/WebKit on iOS 13-17.2.1. Our rules detect both specific IOCs and generic browser exploitation techniques including in-browser Mach-O parsing, ARM64 gadget scanning, and NaN-boxing type confusion. Sun, 08 Mar 2026 00:00:00 GMT noreply@scanmalware.com (ScanMalware Research Team) threat-intelligence exploit-kit ios yara webkit browser-exploit coruna https://scanmalware.com/blog/shinyhunters-phishing-kit-analysis https://scanmalware.com/blog/shinyhunters-phishing-kit-analysis Deep technical analysis of ShinyHunters' sophisticated real-time phishing kit used for SSO credential theft and MFA bypass. Detailed breakdown of the attack infrastructure, JavaScript malware, and MFA bypass mechanisms used against healthcare and fintech companies. Tue, 03 Feb 2026 00:00:00 GMT noreply@scanmalware.com (ScanMalware Research Team) threat-intelligence phishing mfa-bypass shinyhunters malware-analysis yara https://scanmalware.com/blog/introducing-scanmalware-cli https://scanmalware.com/blog/introducing-scanmalware-cli We're excited to announce the official ScanMalware CLI tool - a Rust-based command-line interface that brings the full power of ScanMalware's security analysis directly to your terminal for automation, batch processing, and DevSecOps workflows. Tue, 07 Jan 2025 00:00:00 GMT noreply@scanmalware.com (ScanMalware Team) cli rust automation devops security tools https://scanmalware.com/blog/caa-validation-implementation https://scanmalware.com/blog/caa-validation-implementation Learn how we added Certificate Authority Authorization (CAA) DNS record validation to our TLS analyzer, including a robust 6-tier DNS fallback strategy to ensure reliable lookups. Sun, 03 Nov 2024 00:00:00 GMT noreply@scanmalware.com (ScanMalware Team) tls security dns certificates caa https://scanmalware.com/blog/certificate-transparency-integration https://scanmalware.com/blog/certificate-transparency-integration Certificate Transparency (CT) logs are now required by browsers for all publicly trusted certificates. Learn how we validate CT compliance and what it means for web security. Sun, 03 Nov 2024 00:00:00 GMT noreply@scanmalware.com (ScanMalware Team) tls security certificates certificate-transparency google https://scanmalware.com/blog/certificate-validity-periods https://scanmalware.com/blog/certificate-validity-periods Modern browsers enforce strict limits on TLS certificate validity periods. Learn about the 398-day rule, why it exists, and how we detect certificates that violate these industry standards. Sun, 03 Nov 2024 00:00:00 GMT noreply@scanmalware.com (ScanMalware Team) tls security certificates compliance browser-security