Analysing malware since 2019

We take malware apart so it can't take you apart.

Malware analysis, reverse engineering, incident response and game anti-cheat protection from analysts who explain what they find in plain language.

  • Strict NDA & confidentiality
  • Isolated analysis lab
  • Actionable IOCs
2026company founded in Budapest
7+ yearsanalysing malware since 2019
3 platformsWindows, Linux & Android
ATT&CKmapped findings

How we work

A clear, confidential process

  1. 01

    Contact

    Tell us what you've found. We sign an NDA and agree how to transfer samples securely.

  2. 02

    Triage

    A first look to judge severity and scope, so you know quickly how worried to be.

  3. 03

    Analyse

    Static, dynamic and manual reverse engineering in an isolated lab environment.

  4. 04

    Report & detect

    A clear report, IOCs, detection rules and concrete next steps for your team.

Game security

Cheats are malware too

Cheats break fair play, and fake cheat downloads are one of the most common ways stealers and RATs reach players. We analyse cheats and the malware hidden inside them, so studios can detect and block them and players stay safe.

Game security services
  • Cheat reverse engineering

    Aimbots, wallhacks, injectors, loaders and kernel drivers taken apart.

  • Anti-cheat detections

    Signatures and behavioural detections for your anti-cheat.

  • Malware in fake cheats

    Stealers and account hijackers disguised as cheats and mods.

Toolkit

Tools of the trade

Industry-standard tooling, combined with our own scripts and lab automation.

IDA Pro Ghidra x64dbg WinDbg Binary Ninja CAPE Sandbox Volatility YARA Sigma Wireshark Sysinternals Frida JADX radare2 Python MITRE ATT&CK MISP VirusTotal

Deliverables

What every analysis includes

Executive summary

A one-page, non-technical overview of the threat, the risk to your business and what to do next.

Technical report

Full detail on behaviour, persistence, network activity and capabilities, mapped to MITRE ATT&CK.

IOCs & detections

Hashes, domains, IPs and ready-to-deploy YARA and Sigma rules for your security tools.

Found something suspicious?

Don't run it, don't delete it. Tell us what you've found and an analyst will get back to you.

Talk to an analyst