Skip to main content
Daniel Kelley on Muck Rack

Daniel Kelley

  • Founder and Cybersecurity Content Writer, Freelance
United Kingdom
As seen in: Sydney Morning Herald, The Globe and Mail, Mint, Esquire, The Star (Malaysia), Security Boulevard, SlashNext, Cloud Security Alliance Blog
Covers:  Cybercrime Cybersecurity
I'm a reformed black hat hacker who has contributed to 100+ bug bounty programs, and I ghostwrite for cybersecurity teams.

Get in touch with Daniel

Contact Daniel, search articles and posts on X, monitor coverage, and track replies from one place.

Learn more about Muck Rack

Actions

Share this page

Articles

5 Ways Cybercrime Has Become a Subscription Business

|
By Daniel Kelley
| varonis.com
Cybercrime has adopted the subscription model, from cloud-based infostealer feeds to Telegram bots for OTP theft. Here are five ways cybercriminals are scaling their operations like a shadow SaaS industry. These days, the cybercrime ecosystem functions more and more like a subscription-based technology sector.
Open in Who Shared Issue with article?

Meet Atroposia: The Stealthy Feature-Packed RAT

|
By Daniel Kelley
Atroposia is a stealthy RAT with HRDP, credential theft, DNS hijacking & fileless exfiltration — aka cybercrime made easy for low-skill attackers. Atroposia is a new remote access trojan (RAT) found by Varonis that uses encrypted command channels, hidden remote access, credential and wallet theft, and persistence. Atroposia isn’t an outlier. It’s the latest entry in a growing market of turnkey, plug-and-play criminal toolkits we recently found, alongside tools such as SpamGPT and MatrixPDF.
Open in Who Shared Issue with article?

HyperRat - A New Android RAT Sold On Cybercrime Networks

|
By Daniel Kelley, BYOD Protection, BlogBy Daniel Kelley
| iverify.io
The Android malware as a service market has matured. Even inexperienced attackers can now launch mobile campaigns with almost no effort. Tools like PhantomOS and Nebula offer silent app installation, two-factor interception, GPS tracking, and managed infrastructure for a few hundred dollars per month. Attackers pay a subscription fee and receive a malicious APK, ready to deploy. The seller handles everything else, including backend servers and customized phishing pages.
Open in Who Shared Issue with article?
See all 37 licensed articles (40 Total)