▸ Engineering & Strategy Journal

Field notes from the edge.

What our engineers learned this week. Hands-on technical deep-dives, postmortems, and strategy frameworks.

All posts Healthcare Engineering Strategy Security Industry

Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays

Iranian state-backed threat actor Nimbus Manticore (also known as GalaxyGato, Mirage Kitten, and others) has launched attacks across the Middle East, Africa, and South Asia using a newly discovered Windows backdoor called NightLedger. The campaign employs custom WebSocket tunnelers to transform compromised systems into covert relay infrastructure, demonstrating advanced persistence and evasion cap

Utopia Tech·Jul 28, 2026

Security

China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth

Cybersecurity researchers at ESET have discovered two previously undocumented Windows variants of the SprySOCKS backdoor, which was originally believed to target only Linux systems. The new variants, designated WIN_DRV and WIN_PLUS, feature hard-coded command-and-control configurations and support multiple communication protocols including TCP and UDP, representing a significant expansion of the C

UTUtopia Tech·1 min·Jun 16, 2026

Security

FlutterShell Backdoor Spreads to macOS via Malicious Google and YouTube Ads

Cybersecurity researchers have identified a macOS malvertising campaign called Operation FlutterBridge that distributes the FlutterShell backdoor through malicious Google and YouTube advertisements. Palo Alto Networks Unit 42 reports this represents an evolution of the JSCoreRunner (FileRipple) attack cluster previously documented in August 2025, indicating an ongoing and adapting threat campaign

UTUtopia Tech·1 min·Jun 4, 2026