Threat Intel Reports

This page will have up to date Intelligence reports on recent attacks, groups and detailed full reports can be downloaded in PDF format. The most recent reports on the top and oldest on the bottom. Reports will contain Description, Confidence, Attack-Pattern, Indicators, Observables (IP, Domain and Hashes) and external article references.

USEFUL TIP : Search this page for Keywords to find report that interests you. Newest Reports at the top of list.

Report-Analysis of Pupy RAT Used in Attacks Against Linux Systems

Report-Analysis of Pupy RAT Used in Attacks Against Linux Systems.pdf

Report-#StopRansomware Akira Ransomware_

Report-#StopRansomware Akira Ransomware_.pdf

Report-Ransomware Dissecting the three heads

Report-Ransomware Dissecting the three heads.pdf

Report-Threat Group Targets the U.S. Automotive Industry

Report-Threat Group Targets the U.S. Automotive Industry.pdf

Report-DuneQuixote campaign targets Middle Eastern entities with malware

Report-DuneQuixote campaign targets Middle Eastern entities with malware.pdf

Report-Kapeka A novel backdoor spotted in Eastern Europe

Report-Kapeka A novel backdoor spotted in Eastern Europe.pdf

Report-Spyware Targeting iOS Devices in Western Europe Analysis of Capabilities

Report-Spyware Targeting iOS Devices in Western Europe Analysis of Capabilities.pdf

Report-Malvertising campaign targeting IT teams with MadMxShell

Report-Malvertising campaign targeting IT teams with MadMxShell.pdf

Report-The Fall of LabHost Law Enforcement Shuts Down Phishing Service Provider

Report-The Fall of LabHost Law Enforcement Shuts Down Phishing Service Provider.pdf

Report-Unveiling Advanced Exploits in Cyber Recruiting Scamse

Report-Unveiling Advanced Exploits in Cyber Recruiting Scamse.pdf

Report-Virus causes Ukrainian users to upload confidential documents to VirusTotal

Report-Virus causes Ukrainian users to upload confidential documents to VirusTotal.pdf

Report-Analysis of the SoumniBot Android banker

Report-Analysis of the SoumniBot Android banker.pdf

Report-Threat Coverage Evil Ant Ransomware

Report-Threat Coverage Evil Ant Ransomware.pdf

Report-An Analysis of WINELOADER

Report-An Analysis of WINELOADER.pdf

Report-Analysis of the APT31 indictment

Report-Analysis of the APT31 indictment.pdf

Report-From Social Engineering to DMARC Abuse The Art of Information Gathering

Report-From Social Engineering to DMARC Abuse The Art of Information Gathering.pdf

Report-Don't Take the Bait The XWorm Tax Scam

Report-Don't Take the Bait The XWorm Tax Scam.pdf

Report-Connect fun New exploit campaign in the wild targets media company

Report-Connect fun New exploit campaign in the wild targets media company.pdf

Report-Renewed Espionage Campaign Targets Southern Asia, Possibly India

Report-Renewed Espionage Campaign Targets Southern Asia, Possibly India.pdf

Report-Automating Pikabot's String Deobfuscation

Report-Automating Pikabot's String Deobfuscation.pdf

Report-Analysis of the backdoor in XZ

Report-Analysis of the backdoor in XZ.pdf

Report-Zero-Day Exploitation of Unauthenticated Remote Code Execution Vulnerability in GlobalProtect (CVE-2024-3400)

Report-Zero-Day Exploitation of Unauthenticated Remote Code Execution Vulnerability in GlobalProtect (CVE-2024-3400).pdf

Report-Security Brief TA547 Targets German Organizations with Rhadamanthys Stealer

Report-Security Brief TA547 Targets German Organizations with Rhadamanthys Stealer.pdf

Report-XZ Utils Backdoor Threat Actor Planned to Inject Further Vulnerabilities

Report-XZ Utils Backdoor Threat Actor Planned to Inject Further Vulnerabilities.pdf

Report-eXotic Visit campaign Tracing the footprints of Virtual Invaders

Report-eXotic Visit campaign Tracing the footprints of Virtual Invaders.pdf

Report-New Technique Detected in an Open Source Supply Chain Attack

Report-New Technique Detected in an Open Source Supply Chain Attack.pdf

Report-Raspberry Robin Now Spreading Through Windows Script Files

Report-Raspberry Robin Now Spreading Through Windows Script Files.pdf

Report-A Detailed Analysis of a Sophisticated Decade-Old Botnet Group

Report-A Detailed Analysis of a Sophisticated Decade-Old Botnet Group.pdf

Report-VenomRAT Deployed with Arsenal of Plugins

Report-VenomRAT Deployed with Arsenal of Plugins.pdf

Report-Persistent Magento backdoor hidden in XML

Report-Persistent Magento backdoor hidden in XML.pdf

Report-Smoke and mirrors A strange signed backdoor

Report-Smoke and mirrors A strange signed backdoor.pdf

Report-Active Nitrogen campaign delivered via malicious ads for PuTTY, FileZilla

Report-Active Nitrogen campaign delivered via malicious ads for PuTTY, FileZilla.pdf

Report-Targets human rights defenders in North Africa with new malware

Report-Targets human rights defenders in North Africa with new malware.pdf

Report-Crypt888 ransomware technical analysis of the malware

Report-Crypt888 ransomware technical analysis of the malware.pdf

Report-Malware-Initiated Vulnerability Scanning Is on the Rise

Report-Malware-Initiated Vulnerability Scanning Is on the Rise.pdf

Report-The Latest MuddyWater Attack Framework

Report-The Latest MuddyWater Attack Framework.pdf

Report-Raspberry Robin and its new anti-emulation trick

Report-Raspberry Robin and its new anti-emulation trick.pdf

Report-Byakugan - The Malware Behind a Phishing Attack

Report-Byakugan - The Malware Behind a Phishing Attack.pdf

Report-Phishing Deception - Suspended Domains Reveal Malicious Payload for Latin American Region

Report-Phishing Deception - Suspended Domains Reveal Malicious Payload for Latin American Region.pdf

Report-The New Version of JsOutProx is Attacking Financial Institutions in APAC and MENA via GitLab Abuse

Report-The New Version of JsOutProx is Attacking Financial Institutions in APAC and MENA via GitLab Abuse.pdf

Report-LazyStealer complex does not mean better

Report-LazyStealer complex does not mean better.pdf

Report-Rattling the cage of a Sidewinder

Report-Rattling the cage of a Sidewinder.pdf

Report-Bing ad leads to SecTopRAT

Report-Bing ad leads to SecTopRAT.pdf

Report-Identifying Domains Through Hardcoded Certificate Values

Report-Identifying Domains Through Hardcoded Certificate Values.pdf

Report-Distinctive Campaign Evolution of Malware

Report-Distinctive Campaign Evolution of Malware.pdf

Report-Targeted phishing attacks aimed at financial and tax positions

Report-Targeted phishing attacks aimed at financial and tax positions.pdf

Report-Slicing up with Binary Ninja

Report-Slicing up with Binary Ninja.pdf

Report-This Spider Bytes Like Ice

Report-This Spider Bytes Like Ice.pdf

Report-Threat Actors Deliver Malware via YouTube Video Game Cracks

Report-Threat Actors Deliver Malware via YouTube Video Game Cracks.pdf

Report- Hey, This Isn't the Right Site! Distribution of Malware Exploiting Google Ads Tracking

Report- Hey, This Isn't the Right Site! Distribution of Malware Exploiting Google Ads Tracking.pdf

Report-Bellingcat Malware Investigation

Report-Bellingcat Malware Investigation.pdf

Report-Cloud Werewolf attacks government officials in Russia and Belarus

Report-Cloud Werewolf attacks government officials in Russia and Belarus.pdf

Report-Malware Spotlight Linodas aka DinodasRAT for Linux

Report-Malware Spotlight Linodas aka DinodasRAT for Linux.pdf

Report-New Campaigns After Operation Swords of Iron

Report-New Campaigns After Operation Swords of Iron.pdf

Report-Stories from the SoC Part 1 IDAT Loader to BruteRatel

Report-Stories from the SoC Part 1 IDAT Loader to BruteRatel.pdf

Report-Dissects infostealer malware

Report-Dissects infostealer malware.pdf

Report-January 2024 review of virus activity on mobile devices

Report-January 2024 review of virus activity on mobile devices.pdf

Report-Phorpiex Malware Campaign

Report-Phorpiex Malware Campaign.pdf

Report-Most prevalent malware files

Report-Most prevalent malware files.pdf

Report-Out of the shadows - ’darcula’ iMessage and RCS smishing attacks target USPS and global postal services

Report-Out of the shadows - ’darcula’ iMessage and RCS smishing attacks target USPS and global postal services.pdf

Report-Android Malware Vultur Expands Its Wingspan

Report-Android Malware Vultur Expands Its Wingspan.pdf

Report-PyPI Inundated by Malicious Typosquatting Campaign

Report-PyPI Inundated by Malicious Typosquatting Campaign.pdf

Report-TeamTNT Operations Actively Enumerating Cloud Environments

Report-TeamTNT Operations Actively Enumerating Cloud Environments.pdf

Report-Fake Browser Update Campaign

Report-Fake Browser Update Campaign.pdf

Report-Operation FlightNight Indian Government Entities and Energy Sector Targeted by Cyber Espionage Campaign

Report-Operation FlightNight Indian Government Entities and Energy Sector Targeted by Cyber Espionage Campaign.pdf

Report-Beware of Malicious Notepad++ Websites that Attack Developers

Report-Beware of Malicious Notepad++ Websites that Attack Developers.pdf

Report-Threat Identification Agent Tesla

Report-Threat Identification Agent Tesla.pdf

Report-DarkGate Loader

Report-DarkGate Loader.pdf

Report-Agent Tesla's New Ride The Rise of a Novel Loader

Report-Agent Tesla's New Ride The Rise of a Novel Loader.pdf

Report-Breaking Boundaries Infiltration Beyond LATAM

Report-Breaking Boundaries Infiltration Beyond LATAM.pdf

Report-ASEAN Entities in the Spotlight Chinese APT Group Targeting

Report-ASEAN Entities in the Spotlight Chinese APT Group Targeting.pdf

Report-Agenda Ransomware Propagates to vCenters and ESXi via Custom PowerShell Script

Report-Agenda Ransomware Propagates to vCenters and ESXi via Custom PowerShell Script.pdf

Report-Malware Disguised as Installer from Korean Public Institution

Report-Malware Disguised as Installer from Korean Public Institution.pdf

Report-Tycoon 2FA an in-depth analysis of the latest version of the phishing kit

Report-Tycoon 2FA an in-depth analysis of the latest version of the phishing kit.pdf

Report-The ghost of TellYouThePass lingers

Report-The ghost of TellYouThePass lingers.pdf

Report-The Updated APT Playbook Tales from the Kimsuky threat actor group

Report-The Updated APT Playbook Tales from the Kimsuky threat actor group.pdf

Report-New Go loader pushes Rhadamanthys stealer_full

Report-New Go loader pushes Rhadamanthys stealer_full.pdf

Report-Sign1 Malware Analysis, Campaign History & Indicators of Compromise

Report-Sign1 Malware Analysis, Campaign History & Indicators of Compromise.pdf

Report-APT29 Uses WINELOADER to Target German Political Parties

Report-APT29 Uses WINELOADER to Target German Political Parties.pdf

Report-Large-Scale StrelaStealer Campaign in Early 2024

Report-Large-Scale StrelaStealer Campaign in Early 2024.pdf

Report-Security Brief TA450 Uses Embedded Links in PDF Attachments in Latest Campaign

Report-Security Brief TA450 Uses Embedded Links in PDF Attachments in Latest Campaign.pdf

Report-AcidPour New Embedded Wiper Variant of AcidRain Appears in Ukraine

Report-AcidPour New Embedded Wiper Variant of AcidRain Appears in Ukraine.pdf

Report-New details on TinyTurla’s post-compromise activity reveal full kill chain

Report-New details on TinyTurla’s post-compromise activity reveal full kill chain.pdf

Report-Rescoms rides waves of AceCryptor spam

Report-Rescoms rides waves of AceCryptor spam.pdf

Report-New Sysrv Botnet Variant Makes Use of Google Subdomain to Spread XMRig Miner

Report-New Sysrv Botnet Variant Makes Use of Google Subdomain to Spread XMRig Miner.pdf

Report-Curious Serpens' Backdoor Technical Analysis, Detection and Prevention

Report-Curious Serpens' Backdoor Technical Analysis, Detection and Prevention.pdf

Report-TeamCity Vulnerability Exploits Lead to Jasmin Ransomware, Other Malware Types

Report-TeamCity Vulnerability Exploits Lead to Jasmin Ransomware, Other Malware Types.pdf

Report-Mirai Nomi A Botnet Leveraging DGA

Report-Mirai Nomi A Botnet Leveraging DGA.pdf

Report-AsukaStealer The Next Chapter in Story

Report-AsukaStealer The Next Chapter in Story.pdf

Report-CryptoWire with Decryption Key Included

Report-CryptoWire with Decryption Key Included.pdf

Report-Exploiting Korean Asset Management Solutions (MeshAgent)

Report-Exploiting Korean Asset Management Solutions (MeshAgent).pdf

Report-Analysis of New DEEP#GOSU Attack Campaign Likely Associated with North Korean Targeting Victims with Stealthy Malware

Report-Analysis of New DEEP#GOSU Attack Campaign Likely Associated with North Korean Targeting Victims with Stealthy Malware.pdf

Report-Earth Krahang Exploits Intergovernmental Trust to Launch Cross-Government Attacks

Report-Earth Krahang Exploits Intergovernmental Trust to Launch Cross-Government Attacks.pdf

Report-Inside the Rabbit Hole BunnyLoader 3.0 Unveiled

Report-Inside the Rabbit Hole BunnyLoader 3.0 Unveiled.pdf

Report-From Delivery To Execution An Evasive Azorult Campaign Smuggled Through Google Sites

Report-From Delivery To Execution An Evasive Azorult Campaign Smuggled Through Google Sites.pdf

Report-The GlorySprout or a Failed Clone of Taurus Stealer

Report-The GlorySprout or a Failed Clone of Taurus Stealer.pdf

Report-Under the Hood of SnakeKeylogger Analyzing its Loader and its Tactics, Techniques, and Procedures

Report-Under the Hood of SnakeKeylogger Analyzing its Loader and its Tactics, Techniques, and Procedures.pdf

Report-Ransomware Roundup – RA World

Report-Ransomware Roundup – RA World.pdf

Report-Ongoing ITG05 operations leverage evolving malware arsenal in global campaigns

Report-Ongoing ITG05 operations leverage evolving malware arsenal in global campaigns.pdf

Report-Blind Eagle's North American Journey

Report-Blind Eagle's North American Journey.pdf

Report-RisePro stealer targets Github users in campaign

Report-RisePro stealer targets Github users in campaign.pdf

Report-Threat actors leverage document publishing sites for ongoing credential and session token theft

Report-Threat actors leverage document publishing sites for ongoing credential and session token theft.pdf

Report-CVE-2024-21412 DarkGate Operators Exploit Microsoft Windows SmartScreen Bypass in Zero-Day Campaign

Report-CVE-2024-21412 DarkGate Operators Exploit Microsoft Windows SmartScreen Bypass in Zero-Day Campaign.pdf

Report-Evasive Panda leverages Monlam Festival to target Tibetans

Report-Evasive Panda leverages Monlam Festival to target Tibetans.pdf

Report-New Banking Trojan Targets Brazil

Report-New Banking Trojan Targets Brazil.pdf

Report-New Fakext malware targets Latin American banks

Report-New Fakext malware targets Latin American banks.pdf

Report-Spinning YARN - A New Linux Malware Campaign Targets Docker, Apache Hadoop, Redis and Confluence

Report-Spinning YARN - A New Linux Malware Campaign Targets Docker, Apache Hadoop, Redis and Confluence.pdf

Report-z0Miner Exploits Korean Web Servers to Attack WebLogic Server

Report-z0Miner Exploits Korean Web Servers to Attack WebLogic Server.pdf

Report-Lord Nemesis Strikes Supply Chain Attack on the Israeli Academic Sector

Report-Lord Nemesis Strikes Supply Chain Attack on the Israeli Academic Sector.pdf

Report-RATs Distributed Through Video Conferencing and Chat Lures

Report-RATs Distributed Through Video Conferencing and Chat Lures.pdf

Report-Multistage RA World Ransomware Uses Anti-AV Tactics, Exploits GPO

Report-Multistage RA World Ransomware Uses Anti-AV Tactics, Exploits GPO.pdf

Report-WogRAT Malware Exploits aNotepad

Report-WogRAT Malware Exploits aNotepad.pdf

Report-On-Device Fraud on the rise exposing a recent fraud campaign

Report-On-Device Fraud on the rise exposing a recent fraud campaign.pdf

Report-It'll be back Attackers still abusing Terminator tool and variant

Report-It'll be back Attackers still abusing Terminator tool and variant.pdf

Report-Deep fake connected to Russian cyberscam network

Report-Deep fake connected to Russian cyberscam network.pdf

Report-Exploiting Document Templates Stego-Campaign Deploying RAT and Agent Tesla

Report-Exploiting Document Templates Stego-Campaign Deploying RAT and Agent Tesla.pdf

Report-New variant of SupermanMiner mining malware continues to be active

Report-New variant of SupermanMiner mining malware continues to be active.pdf

Report-GhostSec’s joint ransomware operation and evolution of their arsenal

Report-GhostSec’s joint ransomware operation and evolution of their arsenal.pdf

Report-A novel backdoor tailored for covert access over the roaming exchange

Report-A novel backdoor tailored for covert access over the roaming exchange.pdf

Report-A comprehensive analysis of I-Soon's commercial offering

Report-A comprehensive analysis of I-Soon's commercial offering.pdf

Report-New Wave of Infections Impersonates WordPress Plugins

Report-New Wave of Infections Impersonates WordPress Plugins.pdf

Report-DDoSia project 2024 updates and behavioural shifts

Report-DDoSia project 2024 updates and behavioural shifts.pdf

Report-Spyware Operators Rebuild Multi-Tier Infrastructure to Target Mobile Devices

Report-Spyware Operators Rebuild Multi-Tier Infrastructure to Target Mobile Devices.pdf

Report-Unusual Attack Chain Leads to NTLM Data Theft

Report-Unusual Attack Chain Leads to NTLM Data Theft.pdf

Report-Don't get BITTER about being targeted -- fight back with the help of the community

Report-Don't get BITTER about being targeted -- fight back with the help of the community.pdf

Report-XRed Backdoor The Hidden Threat in Trojanized Programs

Report-XRed Backdoor The Hidden Threat in Trojanized Programs.pdf

Report-DCRat Step-by-Step Analysis in ANY.RUN

Report-DCRat Step-by-Step Analysis in ANY.RUN.pdf

Report-Threat Actors Exploit Multiple Vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways

Report-Threat Actors Exploit Multiple Vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways.pdf

Report-Scanning for Confluence CVE-2022-26134

Report-Scanning for Confluence CVE-2022-26134.pdf

Report-#StopRansomware Phobos Ransomware

Report-#StopRansomware Phobos Ransomware.pdf

Report-The Art of Domain Deception New Tactic to Deceive Users

Report-The Art of Domain Deception New Tactic to Deceive Users.pdf

Report-Dissecting DarkGate Modular Malware Delivery and Persistence as a Service

Report-Dissecting DarkGate Modular Malware Delivery and Persistence as a Service.pdf

Report-DNS Used to Hide Fake Investment Platform Schemes

Report-DNS Used to Hide Fake Investment Platform Schemes.pdf

Report-One year later, Rhadamanthys is still dropped via malvertising

Report-One year later, Rhadamanthys is still dropped via malvertising.pdf

Report-New Malicious PyPI Packages used by Lazarus

Report-New Malicious PyPI Packages used by Lazarus.pdf

Report-Suspected Iranian Threat Actor UNC1549 Targets Israeli and Middle East Aerospace and Defense Sectors

Report-Suspected Iranian Threat Actor UNC1549 Targets Israeli and Middle East Aerospace and Defense Sectors.pdf

Report-The Slingshot_full

Report-The Slingshot_full.pdf

Report-StopRansomware Blackcat

Report-StopRansomware Blackcat.pdf

Report-Earth Preta Spear-Phishing Governments Worldwide

Report-Earth Preta Spear-Phishing Governments Worldwide.pdf

Report-Unveiling UAC-0184 The Steganography Saga of the IDAT Loader Delivering Remcos RAT to a Ukraine Entity in Finland

Report-Unveiling UAC-0184 The Steganography Saga of the IDAT Loader Delivering Remcos RAT to a Ukraine Entity in Finland.pdf

Report-TinyTurla-NG In-depth tooling and command and control analysis

Report-TinyTurla-NG In-depth tooling and command and control analysis.pdf

Report-Doppelgänger Russia-Aligned Influence Operation Targets Germany

Report-Doppelgänger Russia-Aligned Influence Operation Targets Germany.pdf

Report-Unmasking Lorenz Ransomware A Dive into Recent Tactics, Techniques and Procedures

Report-Unmasking Lorenz Ransomware A Dive into Recent Tactics, Techniques and Procedures.pdf

Report-Operation Texonto Information operation targeting Ukrainian speakers in the context of the war

Report-Operation Texonto Information operation targeting Ukrainian speakers in the context of the war.pdf

Report-Threat Brief ConnectWise ScreenConnect Vulnerabilities

Report-Threat Brief ConnectWise ScreenConnect Vulnerabilities.pdf

Report-Warning of North Korean cyber threats targeting the Defense Sector

Report-Warning of North Korean cyber threats targeting the Defense Sector.pdf

Report-Abuse of Google Cloud Run in LATAM-focused malware campaigns

Report-Abuse of Google Cloud Run in LATAM-focused malware campaigns.pdf

Report-Migo - a Redis Miner with Novel System Weakening Techniques

Report-Migo - a Redis Miner with Novel System Weakening Techniques.pdf

Report-Earth Preta Campaign Uses DOPLUGS to Target Asia

Report-Earth Preta Campaign Uses DOPLUGS to Target Asia.pdf

Report-Russia-Aligned TAG-70 Targets European Government and Military Mail Servers in New Espionage Campaig

Report-Russia-Aligned TAG-70 Targets European Government and Military Mail Servers in New Espionage Campaig.pdf

Report-RansomHouse am See

Report-RansomHouse am See.pdf

Report-Kimsuky abuses a valid certificate to distribute TrollAgent

Report-Kimsuky abuses a valid certificate to distribute TrollAgent.pdf

Report-Technical Analysis of DarkVNC

Report-Technical Analysis of DarkVNC.pdf

Report-Alpha Ransomware Emerges From NetWalker Ashes

Report-Alpha Ransomware Emerges From NetWalker Ashes.pdf

Report-RCE to Sliver IR Tales from the Field

Report-RCE to Sliver IR Tales from the Field.pdf

Report-TicTacToe Dropper

Report-TicTacToe Dropper.pdf

Report-Massive utility scam campaign spreads via online ads

Report-Massive utility scam campaign spreads via online ads.pdf

Report-Face Off_full

Report-Face Off_full.pdf

Report-TinyTurla Next Generation - Turla APT spies on Polish NGOs

Report-TinyTurla Next Generation - Turla APT spies on Polish NGOs.pdf

Report-SNS Sender Active Campaigns Unleash Messaging Spam Through the Cloud

Report-SNS Sender Active Campaigns Unleash Messaging Spam Through the Cloud.pdf

Report-Kryptina RaaS From Underground Commodity to Open Source Threat

Report-Kryptina RaaS From Underground Commodity to Open Source Threat.pdf

Report-Fileless Revenge RAT Malware

Report-Fileless Revenge RAT Malware.pdf

Report-Zero-day vulnerability in Ivanti software

Report-Zero-day vulnerability in Ivanti software.pdf

Report-The (D)Evolution of Pikabot

Report-The (D)Evolution of Pikabot.pdf

Report-Kimsuky disguised as a Korean company signed with a valid certificate to distribute Troll Stealer

Report-Kimsuky disguised as a Korean company signed with a valid certificate to distribute Troll Stealer.pdf

Report-MoqHao Evolution New variants start automatically right after installation

Report-MoqHao Evolution New variants start automatically right after installation.pdf

Report-Spyware isn’t going anywhere, and neither are its tactics

Report-Spyware isn’t going anywhere, and neither are its tactics.pdf

Report-New backdoor used in long-term cyber espionage operation targeting an Islamic organization

Report-New backdoor used in long-term cyber espionage operation targeting an Islamic organization.pdf

Report-HijackLoader Expands Techniques to Improve Defense Evasion

Report-HijackLoader Expands Techniques to Improve Defense Evasion.pdf

Report-A Python MP3 Player with Builtin Keylogger Capability

Report-A Python MP3 Player with Builtin Keylogger Capability.pdf

Report-A multi-stage banking Trojan abusing the Squirrel installer

Report-A multi-stage banking Trojan abusing the Squirrel installer.pdf

Report-PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. Critical Infrastructure

Report-PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. Critical Infrastructure.pdf

Report-RedCurl cyber spies aim for Australia, Singapore and Hong Kong

Report-RedCurl cyber spies aim for Australia, Singapore and Hong Kong.pdf

Report-Chinese Websites Posing as Local News Outlets Target Global Audiences with Pro-Beijing Content

Report-Chinese Websites Posing as Local News Outlets Target Global Audiences with Pro-Beijing Content.pdf

Report-APT-K-47 group uses new malware tools to launch data theft attacks

Report-APT-K-47 group uses new malware tools to launch data theft attacks.pdf

Report-Software Installer Impersonation Kimsuky (APT-Q-2) Information Stealing Operation

Report-Software Installer Impersonation Kimsuky (APT-Q-2) Information Stealing Operation.pdf

Report-Analysis of Kimsuky group using Dropbox for operations

Report-Analysis of Kimsuky group using Dropbox for operations.pdf

Report-New Information on Cyberespionage Attacks against Myanmar Military Junta

Report-New Information on Cyberespionage Attacks against Myanmar Military Junta.pdf

Report-Distribution of Zephyr CoinMiner Using Autoit

Report-Distribution of Zephyr CoinMiner Using Autoit.pdf

Report-Smargaft Harnesses EtherHiding for Stealthy C2 Hosting

Report-Smargaft Harnesses EtherHiding for Stealthy C2 Hosting.pdf

Report-Analysis and Detection of STEADY#URSA Attack Campaign Targeting Ukraine Military Dropping New Covert SUBTLE-PAWS PowerShell Backdoor

Report-Analysis and Detection of STEADY#URSA Attack Campaign Targeting Ukraine Military Dropping New Covert SUBTLE-PAWS PowerShell Backdoor.pdf

Report-Frog4Shell — FritzFrog Botnet Adds One-Days to Its Arsenal

Report-Frog4Shell — FritzFrog Botnet Adds One-Days to Its Arsenal.pdf

Report-VajraSpy A Patchwork of espionage apps

Report-VajraSpy A Patchwork of espionage apps.pdf

Report-Scaly Wolf uses White Snake stealer against Russian industry

Report-Scaly Wolf uses White Snake stealer against Russian industry.pdf

Report-Trigona Ransomware Threat Actor Uses Mimic Ransomware

Report-Trigona Ransomware Threat Actor Uses Mimic Ransomware.pdf

Report-‘Tis the Season for Tax Hax

Report-‘Tis the Season for Tax Hax.pdf

Report-Evolution of UNC4990 Uncovering USB Malware's Hidden Depths

Report-Evolution of UNC4990 Uncovering USB Malware's Hidden Depths.pdf

Report-An Evasive Large-Scale Scareware and PUP Delivery Campaign

Report-An Evasive Large-Scale Scareware and PUP Delivery Campaign.pdf

Report-Nitrogen shelling malware from hacked sites

Report-Nitrogen shelling malware from hacked sites.pdf

Report-NSPX30 A sophisticated AitM-enabled implant evolving since 2005

Report-NSPX30 A sophisticated AitM-enabled implant evolving since 2005.pdf

Report-Letters allegedly from the State Special Communications Service and the State Emergency Service - UAC-0050 attack using RemoteUtilities

Report-Letters allegedly from the State Special Communications Service and the State Emergency Service - UAC-0050 attack using RemoteUtilities.pdf

Report-JAVA-Based Sophisticated Stealer Using Discord Bot as EventListener

Report-JAVA-Based Sophisticated Stealer Using Discord Bot as EventListener.pdf

Report-Kasseika Ransomware Deploys BYOVD Attacks, Abuses PsExec and Exploits Martini Driver

Report-Kasseika Ransomware Deploys BYOVD Attacks, Abuses PsExec and Exploits Martini Driver.pdf

Report-Cactus Ransomware

Report-Cactus Ransomware.pdf

Report-Vextrio Operates Massive Criminal Affiliate Program

Report-Vextrio Operates Massive Criminal Affiliate Program.pdf

Report-Enter The Gates An Analysis of the DarkGate AutoIt Loader

Report-Enter The Gates An Analysis of the DarkGate AutoIt Loader.pdf

Report-Mimo CoinMiner and Mimus Ransomware Installed via Vulnerability Attacks

Report-Mimo CoinMiner and Mimus Ransomware Installed via Vulnerability Attacks.pdf

Report-An update on Chaes malware Infostealer

Report-An update on Chaes malware Infostealer.pdf

Report-Security Brief TA866 Returns with a Large Email Campaign

Report-Security Brief TA866 Returns with a Large Email Campaign.pdf

Report-Apache ActiveMQ Vulnerability Leads to Stealthy Godzilla Webshell

Report-Apache ActiveMQ Vulnerability Leads to Stealthy Godzilla Webshell.pdf

Report-Russian threat group COLDRIVER expands its targeting of Western officials to include the use of malware

Report-Russian threat group COLDRIVER expands its targeting of Western officials to include the use of malware.pdf

Report-Kuiper Ransomware’s Evolution

Report-Kuiper Ransomware’s Evolution.pdf

Report-Detailed Analysis of DarkGate; Investigating new top-trend backdoor malware

Report-Detailed Analysis of DarkGate; Investigating new top-trend backdoor malware.pdf

Report-From Russia With Code Disarming Atomic Stealer

Report-From Russia With Code Disarming Atomic Stealer.pdf

Report-Burnout Inferno Drainer’s multimillion-dollar scam scheme detailed

Report-Burnout Inferno Drainer’s multimillion-dollar scam scheme detailed.pdf

Report-Bigpanzi Exposed The Hidden Cyber Threat Behind Your Set-Top Box

Report-Bigpanzi Exposed The Hidden Cyber Threat Behind Your Set-Top Box.pdf

Report-Rimasuta New Variant Switches to ChaCha20 Encryption Algorithm

Report-Rimasuta New Variant Switches to ChaCha20 Encryption Algorithm.pdf

Report-WorkersDevBackdoor Delivered via Malvertising

Report-WorkersDevBackdoor Delivered via Malvertising.pdf

Report-Suspected APT Targets Ivanti Connect Secure VPN in New Zero-Day Exploitation

Report-Suspected APT Targets Ivanti Connect Secure VPN in New Zero-Day Exploitation.pdf

Report-Medusa Ransomware Turning Your Files into Stone

Report-Medusa Ransomware Turning Your Files into Stone.pdf

Report-Active Exploitation of Two Zero-Day Vulnerabilities in Ivanti Connect Secure VPN

Report-Active Exploitation of Two Zero-Day Vulnerabilities in Ivanti Connect Secure VPN.pdf

Report-Exploring FBot Python-Based Malware Targeting Cloud and Payment Services

Report-Exploring FBot Python-Based Malware Targeting Cloud and Payment Services.pdf

Report-Pivoting through a Sea of indicators to spot Turtles

Report-Pivoting through a Sea of indicators to spot Turtles.pdf

Report-DreamBus Unleashes Metabase Mayhem With New Exploit Module

Report-DreamBus Unleashes Metabase Mayhem With New Exploit Module.pdf

Report-Black Basta-Affiliated Water Curupira’s Pikabot Spam Campaign

Report-Black Basta-Affiliated Water Curupira’s Pikabot Spam Campaign.pdf

Report-Mirai.TBOT Uncovered Over 100 Groups and 30,000+ Infected Hosts in a big IoT Botnet

Report-Mirai.TBOT Uncovered Over 100 Groups and 30,000+ Infected Hosts in a big IoT Botnet.pdf

Report-Three New Malicious PyPI Packages Deploy CoinMiner on Linux Devices

Report-Three New Malicious PyPI Packages Deploy CoinMiner on Linux Devices.pdf

Report-AsyncRAT loader Obfuscation, DGAs, decoys and Govno

Report-AsyncRAT loader Obfuscation, DGAs, decoys and Govno.pdf

Report-CVE-2017-11882 To Deliver Agent Tesla

Report-CVE-2017-11882 To Deliver Agent Tesla.pdf

Report-Trend Analysis on Kimsuky Group’s Attacks Using AppleSeed

Report-Trend Analysis on Kimsuky Group’s Attacks Using AppleSeed.pdf

Report-Fog of Cyber Warfare Cloud Atlas Spies Attack Russian Companies Under the guise of Supporting NWO Participants

Report-Fog of Cyber Warfare Cloud Atlas Spies Attack Russian Companies Under the guise of Supporting NWO Participants.pdf

Report-Akira, again The ransomware that keeps on taking

Report-Akira, again The ransomware that keeps on taking.pdf

Xamalicious” Actively Infecting Devices

Xamalicious” Actively Infecting Devices.pdf

Report-OSINT - BattleRoyal, DarkGate Cluster Spreads via Email and Fake Browser Updates

Report-OSINT - BattleRoyal, DarkGate Cluster Spreads via Email and Fake Browser Updates.pdf

Report-Android Banking Trojan Chameleon can now bypass any Biometric Authentication

Report-Android Banking Trojan Chameleon can now bypass any Biometric Authentication.pdf

Report-BattleRoyal, DarkGate Cluster Spreads via Email and Fake Browser Updates

Report-BattleRoyal, DarkGate Cluster Spreads via Email and Fake Browser Updates.pdf

Report-New MetaStealer malvertising campaigns

Report-New MetaStealer malvertising campaigns.pdf

Report-Modus operandi UAC-0177 (JokerDPR) on the example of one of the cyber attacks

Report-Modus operandi UAC-0177 (JokerDPR) on the example of one of the cyber attacks.pdf

Report-CALISTO doxxing Sekoia.io findings concurs to Reuters’ investigation on FSB-related Andrey Korinets

Report-CALISTO doxxing Sekoia.io findings concurs to Reuters’ investigation on FSB-related Andrey Korinets.pdf

Report-Why Is an Australian Footballer Collecting My Passwords The Various Ways Malicious JavaScript Can Steal Your Secrets

Report-Why Is an Australian Footballer Collecting My Passwords The Various Ways Malicious JavaScript Can Steal Your Secrets.pdf

Report-Operation HamsaUpdate A Sophisticated Campaign Delivering Wipers Puts Israeli Infrastructure at Risk

Report-Operation HamsaUpdate A Sophisticated Campaign Delivering Wipers Puts Israeli Infrastructure at Risk.pdf

Report-PikaBot distributed via malicious search ads

Report-PikaBot distributed via malicious search ads.pdf

Report-StopRansomware Play Ransomware

Report-StopRansomware Play Ransomware.pdf

Report-Malvertisers zoom in on cryptocurrencies and initial access

Report-Malvertisers zoom in on cryptocurrencies and initial access.pdf

Report-Toward Ending the Domain Wars Early Detection of Malicious Stockpiled Domains

Report-Toward Ending the Domain Wars Early Detection of Malicious Stockpiled Domains.pdf

Report-A pernicious potpourri of Python packages in PyPI

Report-A pernicious potpourri of Python packages in PyPI.pdf

Report-Gaza Cybergang Unified Front Targeting Hamas Opposition

Report-Gaza Cybergang Unified Front Targeting Hamas Opposition.pdf

Report-Rhadamanthys v0.5.0 - a deep dive into the stealer’s components

Report-Rhadamanthys v0.5.0 - a deep dive into the stealer’s components.pdf

Report-Kaspersky crimeware report FakeSG, Akira and AMOS

Report-Kaspersky crimeware report FakeSG, Akira and AMOS.pdf

Report-Mallox Resurrected Ransomware Attacks Exploiting MS-SQL Continue to Burden Enterprises

Report-Mallox Resurrected Ransomware Attacks Exploiting MS-SQL Continue to Burden Enterprises.pdf

Report-OilRig’s persistent attacks using cloud service-powered downloaders

Report-OilRig’s persistent attacks using cloud service-powered downloaders.pdf

Report-Routers Roasting on an Open Firewall the KV-botnet Investigation

Report-Routers Roasting on an Open Firewall the KV-botnet Investigation.pdf

Report-Security Brief TA4557 Targets Recruiters Directly via Email

Report-Security Brief TA4557 Targets Recruiters Directly via Email.pdf

Report-MrAnon Stealer Spreads via Email with Fake Hotel Booking PDF

Report-MrAnon Stealer Spreads via Email with Fake Hotel Booking PDF.pdf

Report-Sandman APT China-Based Adversaries Embrace Lua

Report-Sandman APT China-Based Adversaries Embrace Lua.pdf

_Report-Operation Blacksmith Lazarus targets organizations worldwide using novel Telegram-based malware written in DLang

_Report-Operation Blacksmith Lazarus targets organizations worldwide using novel Telegram-based malware written in DLang.pdf

Report-Analysis of North Korean Hackers’ Targeted Phishing Scams on Telegram

Report-Analysis of North Korean Hackers’ Targeted Phishing Scams on Telegram.pdf

Report-Fighting Ursa Aka APT28 Illuminating a Covert Campaign

Report-Fighting Ursa Aka APT28 Illuminating a Covert Campaign.pdf

Report-Getting gooey with GULOADER deobfuscating the downloader

Report-Getting gooey with GULOADER deobfuscating the downloader.pdf

Report-Curse of the Krasue New Linux Remote Access Trojan targets Thailand

Report-Curse of the Krasue New Linux Remote Access Trojan targets Thailand.pdf

Report-AA23-339A Threat Actors Exploit Adobe ColdFusion CVE- 2023-26360 for Initial Access to Government Servers

Report-AA23-339A Threat Actors Exploit Adobe ColdFusion CVE- 2023-26360 for Initial Access to Government Servers.pdf

Report-PSA Fake CVE-2023-45124 Phishing Scam Tricks Users Into Installing Backdoor Plugin

Report-PSA Fake CVE-2023-45124 Phishing Scam Tricks Users Into Installing Backdoor Plugin.pdf

Report-AsyncRAT Distributed via WSF Script

Report-AsyncRAT Distributed via WSF Script.pdf

Report-Beware of predatory fin(tech) Loan sharks use Android apps to reach new depths

Report-Beware of predatory fin(tech) Loan sharks use Android apps to reach new depths.pdf

Report-DanaBot Triage

Report-DanaBot Triage.pdf

Report-SQL Brute Force Leads to BlueSky Ransomware

Report-SQL Brute Force Leads to BlueSky Ransomware.pdf

Report-Analysis of a new macOS Trojan-Proxy

Report-Analysis of a new macOS Trojan-Proxy.pdf

Report-MAR-10478915-1.v1 Citrix Bleed

Report-MAR-10478915-1.v1 Citrix Bleed.pdf

Report-Threat Actors Exploit Adobe ColdFusion CVE-2023-26360 for Initial Access to Government Servers

Report-Threat Actors Exploit Adobe ColdFusion CVE-2023-26360 for Initial Access to Government Servers.pdf

Report-Black Basta ransomware victims have paid over $100 million

Report-Black Basta ransomware victims have paid over $100 million.pdf

Report-IT threat evolution Q3 2023

Report-IT threat evolution Q3 2023.pdf

Report-New BlueNoroff loader for macOS

Report-New BlueNoroff loader for macOS.pdf

Report-PSA Fake CVE-2023-45124 Phishing Scam Tricks Users Into Installing Backdoor Plugin

Report-PSA Fake CVE-2023-45124 Phishing Scam Tricks Users Into Installing Backdoor Plugin.pdf

Report-P2Pinfect - New Variant Targets MIPS Devices

Report-P2Pinfect - New Variant Targets MIPS Devices.pdf

Report-AeroBlade on the Hunt Targeting the U.S. Aerospace Industry

Report-AeroBlade on the Hunt Targeting the U.S. Aerospace Industry.pdf

Report-IRGC-Affiliated Cyber Actors Exploit PLCs in Multiple Sectors, Including U.S. Water and Wastewater Systems Facilities

Report-IRGC-Affiliated Cyber Actors Exploit PLCs in Multiple Sectors, Including U.S. Water and Wastewater Systems Facilities.pdf

Report-New Tool Set Found Used Against Middle East, Africa and the US

Report-New Tool Set Found Used Against Middle East, Africa and the US.pdf

Report-Associated Press, ESPN, CBS among top sites serving fake virus alerts

Report-Associated Press, ESPN, CBS among top sites serving fake virus alerts.pdf

Report-New SugarGh0st RAT targets Uzbekistan government and South Korea

Report-New SugarGh0st RAT targets Uzbekistan government and South Korea.pdf

Report-GoTitan Botnet - Ongoing Exploitation on Apache ActiveMQ

Report-GoTitan Botnet - Ongoing Exploitation on Apache ActiveMQ.pdf

Report-The Mahagrass Organization (APT-Q-36) uses the Spyder downloader to deliver the Remcos Trojan

Report-The Mahagrass Organization (APT-Q-36) uses the Spyder downloader to deliver the Remcos Trojan.pdf

Report-DPRK state-linked cyber actors conduct software supply chain attacks

Report-DPRK state-linked cyber actors conduct software supply chain attacks.pdf

Report-Telekopye Hunting Mammoths using Telegram bot

Report-Telekopye Hunting Mammoths using Telegram bot.pdf

Report-Israel-Hamas War Spotlight Shaking the Rust Off SysJoker

Report-Israel-Hamas War Spotlight Shaking the Rust Off SysJoker.pdf

Report-Attack Signals Possible Return of Genesis Market, Abuses Node.js, and EV Code Signing

Report-Attack Signals Possible Return of Genesis Market, Abuses Node.js, and EV Code Signing.pdf

Report-The Continued Evolution of the DarkGate Malware-as-a-Service

Report-The Continued Evolution of the DarkGate Malware-as-a-Service.pdf

Report-Tracking Vidar Infrastructure with Censys

Report-Tracking Vidar Infrastructure with Censys.pdf

Report-MetaStealer - Redline's Doppelgänger

Report-MetaStealer - Redline's Doppelgänger.pdf

Report-ParaSiteSnatcher How Malicious Chrome Extensions Target Brazil

Report-ParaSiteSnatcher How Malicious Chrome Extensions Target Brazil.pdf

Report-Agonizing Serpens (Aka Agrius) Targeting the Israeli Higher Education and Tech Sectors

Report-Agonizing Serpens (Aka Agrius) Targeting the Israeli Higher Education and Tech Sectors.pdf

Report-Analysis of activities of suspected APT-C-36 (Blind Eagle) organization launching Amadey botnet Trojan

Report-Analysis of activities of suspected APT-C-36 (Blind Eagle) organization launching Amadey botnet Trojan.pdf

Report-Elastic catches DPRK passing out KANDYKORN

Report-Elastic catches DPRK passing out KANDYKORN.pdf

Report-CloudKeys in the Air Tracking Malicious Operations of Exposed IAM Keys

Report-CloudKeys in the Air Tracking Malicious Operations of Exposed IAM Keys.pdf

Report-WhatsApp spy mod spreads through Telegram, attacks Arabic-speaking users

Report-WhatsApp spy mod spreads through Telegram, attacks Arabic-speaking users.pdf

Report-Malvertising via Dynamic Search Ads delivers malware bonanza

Report-Malvertising via Dynamic Search Ads delivers malware bonanza.pdf

Report-Security Brief TA571 Delivers IcedID Forked Loader

Report-Security Brief TA571 Delivers IcedID Forked Loader.pdf

Report-CloudKeys in the Air Tracking Malicious Operations of Exposed IAM Keys

Report-CloudKeys in the Air Tracking Malicious Operations of Exposed IAM Keys.pdf

Report-Mystic Stealer Revisited_full

Report-Mystic Stealer Revisited_full.pdf

Report-GHOSTPULSE haunts victims using defense evasion bag o' tricks

Report-GHOSTPULSE haunts victims using defense evasion bag o' tricks.pdf

Report-A cascade of compromise unveiling Lazarus' new campaign

Report-A cascade of compromise unveiling Lazarus' new campaign.pdf

Report-StripedFly Perennially flying under the radar_full

Report-StripedFly Perennially flying under the radar_full.pdf

Report-Hong Kong residents targeted in malvertising campaigns for WhatsApp, Telegram

Report-Hong Kong residents targeted in malvertising campaigns for WhatsApp, Telegram.pdf

Report-When PAM Goes Rogue Malware Uses Authentication Modules for Mischief

Report-When PAM Goes Rogue Malware Uses Authentication Modules for Mischief.pdf

Report-Hacktivism in the Israel-Hamas Conflict Citizen Data Leakage Using Old Malware

Report-Hacktivism in the Israel-Hamas Conflict Citizen Data Leakage Using Old Malware.pdf

Report-PLAYCrypt Extortion Software Analysis_full

Report-PLAYCrypt Extortion Software Analysis_full.pdf

Report-Winter Vivern exploits zero-day vulnerability in Roundcube Webmail servers

Report-Winter Vivern exploits zero-day vulnerability in Roundcube Webmail servers.pdf

Report-Quasar RAT's Dual DLL Sideloading Technique

Report-Quasar RAT's Dual DLL Sideloading Technique.pdf

Report-WatchDog Mining Organization's Activity Analysis

Report-WatchDog Mining Organization's Activity Analysis.pdf

Report-An iLUMMAnation on LummaStealer

Report-An iLUMMAnation on LummaStealer.pdf

Report-DarkGate malware campaign

Report-DarkGate malware campaign.pdf

Report-Stealer for PIX payment system, new Lumar stealer and Rhysida ransomware

Report-Stealer for PIX payment system, new Lumar stealer and Rhysida ransomware.pdf

Report-Organizations under attack from cryptominer-keylogger-backdoor combo

Report-Organizations under attack from cryptominer-keylogger-backdoor combo.pdf

Report-Updated MATA attacks industrial companies in Eastern Europe

Report-Updated MATA attacks industrial companies in Eastern Europe.pdf

Report-Crambus New Campaign Targets Middle Eastern Government

Report-Crambus New Campaign Targets Middle Eastern Government.pdf

Report-BlackCat Climbs the Summit With a New Tactic

Report-BlackCat Climbs the Summit With a New Tactic.pdf

Report-Various actors actively deploying Lumma Stealer in multiple campaigns

Report-Various actors actively deploying Lumma Stealer in multiple campaigns.pdf

Report-Analysis of the expansion of fraudulent backdoors claimed to have been implanted in 20 million devices

Report-Analysis of the expansion of fraudulent backdoors claimed to have been implanted in 20 million devices.pdf

Report-Kimsuky Threat Group Uses RDP to Control Infected Systems

Report-Kimsuky Threat Group Uses RDP to Control Infected Systems.pdf

Report-Void Rabisu Targets Female Political Leaders with New Slimmed-Down ROMCOM Variant

Report-Void Rabisu Targets Female Political Leaders with New Slimmed-Down ROMCOM Variant.pdf

Report-CVE-2023-38831 Exploited by Pro-Russia Hacking Groups in RU-UA Conflict Zone for Credential Harvesting Operations_full

Report-CVE-2023-38831 Exploited by Pro-Russia Hacking Groups in RU-UA Conflict Zone for Credential Harvesting Operations_full.pdf

Report-Take a note of SpyNote!

Report-Take a note of SpyNote!.pdf

Report-Peculiarities of destructive cyber attacks against Ukrainian providers

Report-Peculiarities of destructive cyber attacks against Ukrainian providers.pdf

Report-Understanding DNS Tunneling Traffic in the Wild

Report-Understanding DNS Tunneling Traffic in the Wild.pdf

Report-Analysis Report on Lazarus Threat Group’s Volgmer and Scout Malware

Report-Analysis Report on Lazarus Threat Group’s Volgmer and Scout Malware.pdf

Report-Sticky Werewolf spies attack government organizations in Russia and Belarus

Report-Sticky Werewolf spies attack government organizations in Russia and Belarus.pdf

Report-DarkGate Opens Organizations for Attack via Skype, Teams

Report-DarkGate Opens Organizations for Attack via Skype, Teams.pdf

Report-Critical Vulnerabilities WS_FTP Exploitation

Report-Critical Vulnerabilities WS_FTP Exploitation.pdf

Report-ToddyCat Keep calm and check logs

Report-ToddyCat Keep calm and check logs.pdf

Report-Dark Angels ESXi Ransomware Borrows Code & Victimology From RagnarLocker

Report-Dark Angels ESXi Ransomware Borrows Code & Victimology From RagnarLocker.pdf

Report-Stayin’ Alive – Targeted Attacks Against Telecoms and Government Ministries in Asia

Report-Stayin’ Alive – Targeted Attacks Against Telecoms and Government Ministries in Asia.pdf

Report-ShellBot DDoS Malware Installed Through Hexadecimal Notation Addresses

Report-ShellBot DDoS Malware Installed Through Hexadecimal Notation Addresses.pdf

Report-Nation-state Hackers Exploiting Confluence Zero-day Vulnerability

Report-Nation-state Hackers Exploiting Confluence Zero-day Vulnerability.pdf

Report-New APT Group Using Custom Malware to Attack Manufacturing & IT Industries

Report-New APT Group Using Custom Malware to Attack Manufacturing & IT Industries.pdf

Report-#StopRansomware AvosLocker Ransomware (Update)

Report-#StopRansomware AvosLocker Ransomware (Update).pdf

Report-The Art of Concealment A New Magecart Campaign That’s Abusing 404 Pages

Report-The Art of Concealment A New Magecart Campaign That’s Abusing 404 Pages.pdf

Report-Grayling Previously Unseen Threat Actor Targets Multiple Organizations in Taiwan

Report-Grayling Previously Unseen Threat Actor Targets Multiple Organizations in Taiwan.pdf

Report-IZ1H9 Campaign Enhances Its Arsenal with Scores of Exploits

Report-IZ1H9 Campaign Enhances Its Arsenal with Scores of Exploits.pdf

Report-Threat Actors Actively Exploiting Progress WS_FTP via Multiple Attack Chains

Report-Threat Actors Actively Exploiting Progress WS_FTP via Multiple Attack Chains.pdf

Report-Leveraging a Hooking Framework to Expand Malware Detection Coverage on the Android Platform

Report-Leveraging a Hooking Framework to Expand Malware Detection Coverage on the Android Platform.pdf

Report Qakbot affiliated actors distribute Ransom Knight malware despite infrastructure takedown

Report-Qakbot-affiliated actors distribute Ransom Knight malware despite infrastructure takedown.pdf

Report Lets dig deeper dissecting the new Android Trojan GoldDigger

Report-Let's dig deeper dissecting the new Android Trojan GoldDigger.pdf

Report Analyzing Lu0Bot A Nodejs Malware with Vast Capabilities

Report-Analyzing Lu0Bot A Node.js Malware with Vast Capabilities.pdf

Report Exposing Infection Techniques Across Supply Chains and Codebases

Report-Exposing Infection Techniques Across Supply Chains and Codebases.pdf

Report LightSpy mAPT Mobile Payment System Attack

Report-LightSpy mAPT Mobile Payment System Attack.pdf

Report Threat Brief MOVEit Transfer SQL Injection Vulnerabilities CVE 2023 34362 CVE 2023 35036 and CVE 2023 35708

Report-Threat Brief - MOVEit Transfer SQL Injection Vulnerabilities CVE-2023-34362, CVE-2023-35036 and CVE-2023-35708.pdf

Report Return to Sender A Brief Analysis of a US Postal Service Smishing Campaign DomainTools

Report-Return to Sender - A Brief Analysis of a US Postal Service Smishing Campaign - DomainTools.pdf

Report Theyve begun Attacks exploiting vulnerability with maximum 10 severity rating CVE 2023 40044

Report-They’ve begun Attacks exploiting vulnerability with maximum 10 severity rating (CVE-2023-40044).pdf

Report EvilProxy Phishing Attack Strikes Indeed

Report-EvilProxy Phishing Attack Strikes Indeed.pdf

Report The art of manipulation fraudsters steal money with remote administration software for mobile devices

Report-The art of manipulation fraudsters steal money with remote administration software for mobile devices.pdf

Report BunnyLoader the newest Malware as a Service full

Report-BunnyLoader, the newest Malware-as-a-Service_full.pdf

Report Silent Push maps over 150 new Lumma C2 infostealer IOCs

Report-Silent Push maps over 150 new Lumma C2 infostealer IOCs.pdf

Report Attacks on Southeast Asian Government Have Links to Alloy Taurus

Report-Attacks on Southeast Asian Government Have Links to Alloy Taurus.pdf

Report GOLD MELODY Profile of an Initial Access Broker

Report-GOLD MELODY Profile of an Initial Access Broker.pdf

Report RedLine Stealer A new variant surfaces Deploying using Batch Script

Report-RedLine Stealer A new variant surfaces, Deploying using Batch Script.pdf

Report Multi year Chinese APT Campaign Targets South Korean Academic Government and Political Entities

Report-Multi-year Chinese APT Campaign Targets South Korean Academic, Government, and Political Entities.pdf

Report New STARKVORTEX Attack Campaign Threat Actors Use Drone Manual Lures to Deliver MerlinAgent Payload

Report-New STARK#VORTEX Attack Campaign Threat Actors Use Drone Manual Lures to Deliver MerlinAgent Payload.pdf

Report Examining the Activities of the Turla APT Group

Report-Examining the Activities of the Turla APT Group.pdf

Report Backchannel Diplomacy APT29s Rapidly Evolving Diplomatic Phishing Operations

Report-Backchannel Diplomacy APT29’s Rapidly Evolving Diplomatic Phishing Operations.pdf

Report A multi ransomware cybercriminal group full

Report-A multi-ransomware cybercriminal group_full.pdf

Report From ScreenConnect to Hive Ransomware in 61 hours

Report-From ScreenConnect to Hive Ransomware in 61 hours.pdf

Report PREDATOR IN THE WIRES Ahmed Eltantawy Targeted with Predator Spyware After Announcing Presidential Ambitions

Report-PREDATOR IN THE WIRES Ahmed Eltantawy Targeted with Predator Spyware After Announcing Presidential Ambitions.pdf

Report Cyberespionage Attacks Against Southeast Asian Government Linked to Stately Taurus Aka Mustang Panda

Report-Cyberespionage Attacks Against Southeast Asian Government Linked to Stately Taurus, Aka Mustang Panda.pdf

Report Rare Backdoors Suspected to be Tied to Gelsemium APT Found in Targeted Attack in Southeast Asian Government

Report-Rare Backdoors Suspected to be Tied to Gelsemium APT Found in Targeted Attack in Southeast Asian Government.pdf

Report The Curious Case of Monti Ransomware A Real World Doppelganger

Report-The Curious Case of “Monti” Ransomware_ A Real-World Doppelganger.pdf

Report Sandman APT A Mystery Group Targeting Telcos with a LuaJIT Toolkit

Report-Sandman APT _ A Mystery Group Targeting Telcos with a LuaJIT Toolkit.pdf

Report StopRansomware Snatch Ransomware

Report-#StopRansomware Snatch Ransomware.pdf

Report npm packages caught exfiltrating Kubernetes config SSH keys

Report-npm packages caught exfiltrating Kubernetes config, SSH keys.pdf

Report Cado Security Labs Researchers Witness a 600X Increase in P2Pinfect Traffic

Report-Cado Security Labs Researchers Witness a 600X Increase in P2Pinfect Traffic.pdf

Report Chinese Malware Appears in Earnest Across Cybercrime Threat Landscape

Report-Chinese Malware Appears in Earnest Across Cybercrime Threat Landscape.pdf

Report Silent Skimmer Online Payment Scraping Campaign Shifts Targets From APAC to NALA

Report-Silent Skimmer Online Payment Scraping Campaign Shifts Targets From APAC to NALA.pdf

Report Unveiling the Shadows The Dark Alliance between GuLoader and Remcos

Report-Unveiling the Shadows The Dark Alliance between GuLoader and Remcos.pdf

Report XWorm Technical Analysis of a New Malware Version

Report-XWorm Technical Analysis of a New Malware Version.pdf

Report New ShroudedSnooper actor targets telecommunications firms in the Middle East with novel Implants

Report-New ShroudedSnooper actor targets telecommunications firms in the Middle East with novel Implants.pdf

Report CapraTube Transparent Tribes CapraRAT Mimics YouTube to Hijack Android Phones

Report-CapraTube Transparent Tribe’s CapraRAT Mimics YouTube to Hijack Android Phones.pdf

Report Earth Lusca Employs New Linux Backdoor Uses Cobalt Strike for Lateral Movement

Report-Earth Lusca Employs New Linux Backdoor, Uses Cobalt Strike for Lateral Movement.pdf

Report New MidgeDropper Variant

Report-New MidgeDropper Variant.pdf

Report A peek into APT36s updated arsenal

Report-A peek into APT36’s updated arsenal.pdf

Report Guarding Against the Unseen Investigating a Stealthy Remcos Malware Attack on Colombian Firms

Report-Guarding Against the Unseen Investigating a Stealthy Remcos Malware Attack on Colombian Firms.pdf

Report New Python NodeStealer Goes Beyond Facebook Credentials Now Stealing All Browser Cookies and Login Credentials

Report-New Python NodeStealer Goes Beyond Facebook Credentials, Now Stealing All Browser Cookies and Login Credentials.pdf

Report Threat Group Assessment Muddled Libra

Report-Threat Group Assessment Muddled Libra.pdf

Report Threat Group Assessment Turla aka Pensive Ursa

Report-Threat Group Assessment Turla (aka Pensive Ursa).pdf

Vidar Abuses EV Certificates Shifts to Ransomware

Vidar Abuses EV Certificates, Shifts to Ransomware.pdf

Report PSA Ongoing Webex malvertising campaign drops BatLoader

Report-PSA Ongoing Webex malvertising campaign drops BatLoader.pdf

Report Peach Sandstorm password spray campaigns enable intelligence collection at high value targets Microsoft Security Blog

Report-Peach Sandstorm password spray campaigns enable intelligence collection at high-value targets Microsoft Security Blog.pdf

Report Email campaigns leverage updated DBatLoader to deliver RATs stealers

Report-Email campaigns leverage updated DBatLoader to deliver RATs, stealers.pdf

Report OriginBotnet Spreads via Malicious Word Document full

Report-OriginBotnet Spreads via Malicious Word Document_full.pdf

Report 3AM New Ransomware Family Used As Fallback in Failed LockBit Attack

Report-3AM New Ransomware Family Used As Fallback in Failed LockBit Attack.pdf

Report Attacker combines phone email lures into believable complex attack chain

Report-Attacker combines phone, email lures into believable, complex attack chain.pdf

Report Free Download Manager backdoored a possible supply chain attack on Linux machines

Report-Free Download Manager backdoored, a possible supply chain attack on Linux machines.pdf

Report Analysis of Cuba ransomware gang activity and tooling

Report-Analysis of Cuba ransomware gang activity and tooling.pdf

Report MrTonyScam Botnet of Facebook Users Launch High Intent Messenger Phishing Attack on Business Accounts

Report-“MrTonyScam” — Botnet of Facebook Users Launch High-Intent Messenger Phishing Attack on Business Accounts.pdf

Report HijackLoader

Report-HijackLoader.pdf

Report The Case of LummaC2 v40

Report-The Case of LummaC2 v4.0.pdf

Report Steal It Campaign

Report-Steal-It Campaign.pdf

Report DarkGate Loader Malware Delivered via Microsoft Teams

Report-DarkGate Loader Malware Delivered via Microsoft Teams.pdf

Report MAR 10454006r5v1 SUBMARINE SKIPJACK SEASPRAY WHIRLPOOL and SALTWATER Backdoors

Report-MAR-10454006.r5.v1 SUBMARINE, SKIPJACK, SEASPRAY, WHIRLPOOL, and SALTWATER Backdoors.pdf

Report Spyware Telegram mod distributed via Google Play

Report-Spyware Telegram mod distributed via Google Play.pdf

Report Multiple Nation State Threat Actors Exploit CVE 2022 47966 and CVE 2022 42475

Report-Multiple Nation-State Threat Actors Exploit CVE-2022-47966 and CVE-2022-42475.pdf

Report Cybercriminals target graphic designers with GPU miners

Report-Cybercriminals target graphic designers with GPU miners.pdf

Report How an APT technique turns to be a public Red Team Project

Report-How an APT technique turns to be a public Red Team Project.pdf

Report Mac users targeted in new malvertising campaign delivering Atomic Stealer

Report-Mac users targeted in new malvertising campaign delivering Atomic Stealer.pdf

Report Active North Korean campaign targeting security researchers

Report-Active North Korean campaign targeting security researchers.pdf

Report I know what you mined last summer summarizing Summer 23 cryptomining activity

Report-I know what you mined last summer summarizing Summer '23 cryptomining activity.pdf

Report Smishing Triad Targeted USPS And US Citizens For Data Theft

Report- Smishing Triad Targeted USPS And US Citizens For Data Theft.pdf

Report Exposing RocketMQ CVE 2023 33246 Payloads

Report-Exposing RocketMQ CVE-2023-33246 Payloads.pdf

Report New Agent Tesla Variant Being Spread by Crafted Excel Document

Report-New Agent Tesla Variant Being Spread by Crafted Excel Document.pdf

Report New Attack Vector In The Cloud Attackers caught exploiting Object Storage Services

Report-New Attack Vector In The Cloud Attackers caught exploiting Object Storage Services.pdf

Report Chae 4 New Chaes Malware Variant Targeting Financial and Logistics Customers

Report-Chae$ 4 New Chaes Malware Variant Targeting Financial and Logistics Customers.pdf

Report Novel RAT discovered SuperBear targeting journalist covering geopolitics of Asia

Report-Novel RAT discovered “SuperBear” targeting journalist covering geopolitics of Asia.pdf

Report VMConnect supply chain attack continues evidence points to North Korea

Report-VMConnect supply chain attack continues, evidence points to North Korea.pdf

Report Fake Update Utilizes New IDAT Loader To Execute StealC and Lumma Infostealers

Report-Fake Update Utilizes New IDAT Loader To Execute StealC and Lumma Infostealers.pdf

Report A Deep Dive into Brute Ratel C4 payloads

Report-A Deep Dive into Brute Ratel C4 payloads.pdf

Report Infamous Chisel Malware Analysis Report

Report-Infamous Chisel Malware Analysis Report.pdf

Report SapphireStealer Open source information stealer enables credential and data theft

Report-SapphireStealer Open-source information stealer enables credential and data theft.pdf

Report Analysis of Andariels New Attack Activities

Report-Analysis of Andariel’s New Attack Activities.pdf

Report BadBazaar espionage tool targets Android users via trojanized Signal and Telegram apps

Report-BadBazaar espionage tool targets Android users via trojanized Signal and Telegram apps.pdf

Report MMRat Carries Out Bank Fraud Via Fake App Stores

Report-MMRat Carries Out Bank Fraud Via Fake App Stores.pdf

Report An Ongoing Open Source Attack Reveals Roots Dating Back To 2021

Report-An Ongoing Open Source Attack Reveals Roots Dating Back To 2021.pdf

Report Earth Estries Targets Government Tech for Cyberespionage

Report-Earth Estries Targets Government, Tech for Cyberespionage.pdf

Report Threat Actor Interplay Good Days Victim Portals and Their Ties to Cloak

Report-Threat Actor Interplay Good Day’s Victim Portals and Their Ties to Cloak.pdf

Report Kinsing Malware Exploits Novel Openfire Vulnerability

Report-Kinsing Malware Exploits Novel Openfire Vulnerability.pdf

Report Peeling Back the Layers of RemcosRat

Report-Peeling Back the Layers of RemcosRat.pdf

Report DreamBus Botnet Exploiting execution Flaw in RocketMQ servers

Report-DreamBus Botnet Exploiting execution Flaw in RocketMQ servers.pdf

Report UAC 0173 judicial authorities and notaries under the gun

Report-UAC-0173 judicial authorities and notaries under the gun.pdf

Report FIN8 LINKED ACTOR TARGETS CITRIX NETSCALER SYSTEMS

Report-FIN8-LINKED ACTOR TARGETS CITRIX NETSCALER SYSTEMS.pdf

Report HTML Smuggling Leads to Domain Wide Ransomware

Report-HTML Smuggling Leads to Domain Wide Ransomware.pdf

Report Adversary On The Defense ANTIBOTPW

Report-Adversary On The Defense ANTIBOT.PW.pdf

Report Smoke Loader Drops Whiffy Recon Wi Fi Scanning and Geolocation Malware

Report-Smoke Loader Drops Whiffy Recon Wi-Fi Scanning and Geolocation Malware.pdf

Trash Panda and A New Minor Variant of NoCry

Trash Panda and A New Minor Variant of NoCry.pdf

Report Agniane Stealer

Report-Agniane Stealer.pdf

Report Malware as a Service Redline Stealer Variants Demonstrate a Low Barrier to Entry Threat

Report-Malware-as-a-Service Redline Stealer Variants Demonstrate a Low-Barrier-to-Entry Threat.pdf

Report Flax Typhoon using legitimate software to quietly access Taiwanese organizations

Report-Flax Typhoon using legitimate software to quietly access Taiwanese organizations.pdf

Report Tunnel Warfare Exposing DNS Tunneling Campaigns using Generative Models CoinLoader Case Study

Report-Tunnel Warfare Exposing DNS Tunneling Campaigns using Generative Models – CoinLoader Case Study.pdf

Report Telekopye Hunting Mammoths using Telegram bot

Report-Telekopye Hunting Mammoths using Telegram bot.pdf

Report Why LaZagne Makes D Bus API Vigilance Crucial

Report-Why LaZagne Makes D-Bus API Vigilance Crucial.pdf

Report Lazarus Groups infrastructure reuse leads to discovery of new malware

Report-Lazarus Group's infrastructure reuse leads to discovery of new malware.pdf

Report Fake Roblox packages target npm with Luna Grabber information stealing malware

Report-Fake Roblox packages target npm with Luna Grabber information-stealing malware.pdf

Report From Conti to Akira Decoding the Latest Linux ESXi Ransomware Families

Report-From Conti to Akira Decoding the Latest Linux & ESXi Ransomware Families.pdf

Report-Carderbee APT Group use Legit Software in Supply Chain Attack Targeting Orgs in Hong Kongpdf

Report Scarabs colon izing vulnerable servers

Report-Scarabs colon-izing vulnerable servers.pdf

Report XLoaders Latest Trick New macOS Variant Disguised as Signed OfficeNote App

Report-XLoader's Latest Trick New macOS Variant Disguised as Signed OfficeNote App.pdf

Report Cuba Ransomware Deploys New Tools Targets Critical Infrastructure Sector in the US and IT Integrator in Latin America

Report-Cuba Ransomware Deploys New Tools Targets Critical Infrastructure Sector in the U.S. and IT Integrator in Latin America.pdf

Report WHIRLPOOL Backdoor CISA

Report-WHIRLPOOL Backdoor CISA.pdf

Report Catching up with WoofLocker the most elaborate traffic redirection scheme to tech support scams

Report-Catching up with WoofLocker, the most elaborate traffic redirection scheme to tech support scams.pdf

Report DotRunpeX demystifying new virtualized NET injector used in the wild

Report-DotRunpeX - demystifying new virtualized .NET injector used in the wild.pdf

Report DLL Hijacking in the Asian Gambling Sector

Report-DLL Hijacking in the Asian Gambling Sector.pdf

Report Old exploit kits still kicking around in 2023

Report-Old exploit kits still kicking around in 2023.pdf

Report Raccoon Stealer Announce Return After Hiatus

Report-Raccoon Stealer Announce Return After Hiatus.pdf

Report Gootloader Why your Legal Document Search May End in Misery

Report-Gootloader Why your Legal Document Search May End in Misery.pdf

Focus on DroxiDat/SystemBC

Report LOLKEK Unmasked An In Depth Analysis of New Samples and Evolving Tactics

Report-LOLKEK Unmasked An In-Depth Analysis of New Samples and Evolving Tactics.pdf

Report MAR 10454006r4v2 SEASPY and WHIRLPOOL Backdoors

Report-MAR-10454006.r4.v2 SEASPY and WHIRLPOOL Backdoors.pdf

Report Mac systems turned into Proxy exit nodes by AdLoad

Report-Mac systems turned into Proxy exit nodes by AdLoad.pdf

Report Rhysida ransomware

Report-Rhysida ransomware.pdf

Report Reptile Malware Targeting Linux Systems

Report-Reptile Malware Targeting Linux Systems.pdf

Report VMConnect Malicious PyPI packages imitate popular open source modules

Report-VMConnect Malicious PyPI packages imitate popular open source modules.pdf

Report New threat actor targets Bulgaria China Vietnam and other countries with customized Yashma ransomware

Report-New threat actor targets Bulgaria, China, Vietnam and other countries with customized Yashma ransomware.pdf

Report Latest Batloader Campaigns Use Pyarmor Pro for Evasion

Report-Latest Batloader Campaigns Use Pyarmor Pro for Evasion.pdf

Report North Korea Compromises Sanctioned Russian Missile Engineering Company

Report-North Korea Compromises Sanctioned Russian Missile Engineering Company.pdf

Report From small LNK to large malicious BAT file with zero VT score

Report-From small LNK to large malicious BAT file with zero VT score.pdf

Report New Rilide Stealer Version Targets Banking Data and Works Around Google Chrome Manifest V3

Report-New Rilide Stealer Version Targets Banking Data and Works Around Google Chrome Manifest V3.pdf

Report Whats happening in the world of crimeware Emotet DarkGate and LokiBot

Report-What’s happening in the world of crimeware Emotet, DarkGate and LokiBot.pdf

Report Honeypot Recon New Variant of SkidMap Targeting Redis

Report-Honeypot Recon New Variant of SkidMap Targeting Redis.pdf

Report Report Ransomware Command and Control Providers Unmasked

Report-Report Ransomware Command-and-Control Providers Unmasked.pdf

Report NodeStealer 20 The Python Version Stealing Facebook Business Accounts

Report-NodeStealer 2.0 – The Python Version Stealing Facebook Business Accounts.pdf

MAR 10454006 r3v1 Exploit Payload Backdoor

MAR-10454006-r3.v1 Exploit Payload Backdoor.pdf

Report MAR 10454006 r2v1 SEASPY Backdoor

Report-MAR-10454006-r2.v1 SEASPY Backdoor.pdf

Report Out of the Sandbox WikiLoader Digs Sophisticated Evasion

Report-Out of the Sandbox WikiLoader Digs Sophisticated Evasion.pdf

Report Novel Malware Redis P2Pinfect

Report-Novel Malware, Redis P2Pinfect.pdf

Report MAR 10454006 r1v2 SUBMARINE Backdoor

Report-MAR-10454006-r1.v2 SUBMARINE Backdoor.pdf

Report Ransomware Delivery URLs Top Campaigns and Trends

Report-Ransomware Delivery URLs Top Campaigns and Trends.pdf

Report The resurgence of the Ursnif banking trojan

Report-The resurgence of the Ursnif banking trojan.pdf

Report Dark Web Profile 8Base Ransomware

Report-Dark Web Profile 8Base Ransomware.pdf

Report Beyond File Search A Novel Method for Exploiting the search ms URI Protocol Handler

Report-Beyond File Search A Novel Method for Exploiting the search-ms URI Protocol Handler.pdf

Report Into the tank with Nitrogen

Report-Into the tank with Nitrogen.pdf

Report Botnet Fenix New botnet going after tax payers in Mexico and Chile

Report-Botnet Fenix New botnet going after tax payers in Mexico and Chile.pdf

Report Evolution of Russian APT29 New Attacks and Techniques Uncovered full

Report-Evolution of Russian APT29 – New Attacks and Techniques Uncovered_full.pdf

Report Amadey Threat Analysis and Detections

Report-Amadey Threat Analysis and Detections.pdf

Report Apple Crimeware Massive Rust Infostealer Campaign Aiming for macOS Sonoma Ahead of Public Release

Report-Apple Crimeware Massive Rust Infostealer Campaign Aiming for macOS Sonoma Ahead of Public Release.pdf

Report Mysterious Decoy Dog malware toolkit still lurks in DNS shadows

Report-Mysterious Decoy Dog malware toolkit still lurks in DNS shadows.pdf

Report Android GravityRAT goes after WhatsApp backups

Report-Android GravityRAT goes after WhatsApp backups.pdf

Report Akira Ransomware full

Report-Akira Ransomware_full.pdf

Report New Reptile Rootkit Malware Attacking Linux Systems Using Port Knocking

Report-New Reptile Rootkit Malware Attacking Linux Systems Using Port Knocking.pdf

Report Sliver C2 in circulation through domestic program developers

Report-Sliver C2 in circulation through domestic program developers.pdf

Report PurpleFox Distributed to MS SQL Servers

Report-PurpleFox Distributed to MS-SQL Servers.pdf

Report Fabricated Microsoft Crypto Wallet Phishing Site Spreads Infostealer

Report-Fabricated Microsoft Crypto Wallet Phishing Site Spreads Infostealer.pdf

Report The threat level for accountants is increasing the UAC 0006 group carried out the third cyber attack in 10 days CERT UA7065 CERT UA7076

Report-The threat level for accountants is increasing the UAC-0006 group carried out the third cyber attack in 10 days (CERT-UA#7065, CERT-UA#7076).pdf

Report HotRat The Risks of Illegal Software Downloads and Hidden AutoHotkey Script Within

Report-HotRat The Risks of Illegal Software Downloads and Hidden AutoHotkey Script Within.pdf

Report DDoS Botnets Target Zyxel Vulnerability CVE 2023 28771

Report-DDoS Botnets Target Zyxel Vulnerability CVE-2023-28771.pdf

Report First ever Open Source Software Supply Chain Attacks

Report-First-ever Open-Source Software Supply Chain Attacks.pdf

Report Lazarus Threat Group Attacking Windows Servers to Use as Malware Distribution Points

Report-Lazarus Threat Group Attacking Windows Servers to Use as Malware Distribution Points.pdf

Report Security alert social engineering campaign targets technology industry employees

Report-Security alert social engineering campaign targets technology industry employees.pdf

Report Analysis of Storm 0558 techniques for unauthorized email access

Report-Analysis of Storm-0558 techniques for unauthorized email access.pdf

Report Threat Group Assessment Mallox Ransomware

Report-Threat Group Assessment Mallox Ransomware.pdf

Report Kanti A NIM Based Ransomware Unleashed in the Wild

Report-Kanti A NIM-Based Ransomware Unleashed in the Wild.pdf

Report Critical and High Vulnerabilities in Citrix ADC and Citrix Gateway CVE 2023 3519 CVE 2023 3466 CVE 2023 3467

Report-Critical and High Vulnerabilities in Citrix ADC and Citrix Gateway (CVE-2023-3519, CVE-2023-3466, CVE-2023-3467).pdf

Report P2PInfect The Rusty Peer to Peer Self Replicating Worm

Report-P2PInfect The Rusty Peer-to-Peer Self-Replicating Worm.pdf

Report Job Scams Using Bioscience Lures Target Universities

Report-Job Scams Using Bioscience Lures Target Universities.pdf

Report Ursnif campaign in Italy

Report-Ursnif campaign in Italy.pdf

Report FIN8 Uses Revamped Sardonic Backdoor to Deliver Noberus Ransomware

Report-FIN8 Uses Revamped Sardonic Backdoor to Deliver Noberus Ransomware.pdf

Report Trojanized Application Preying on TeamViewer Users

Report-Trojanized Application Preying on TeamViewer Users.pdf

Report Microsoft Zero Day Vulnerability CVE 2023 36884 Being Actively Exploited

Report-Microsoft Zero Day Vulnerability CVE-2023-36884 Being Actively Exploited.pdf

Report CVE 2023 36884 Microsoft Office and Windows HTML Remote Code Execution

Report-CVE-2023-36884 - Microsoft Office and Windows HTML Remote Code Execution.pdf

Report Malicious campaigns target government military and civilian entities in Ukraine Poland

Report-Malicious campaigns target government, military and civilian entities in Ukraine, Poland.pdf

Report Agile Approach to Mass Cloud Credential Harvesting and Crypto Mining Sprints Ahead

Report-Agile Approach to Mass Cloud Credential Harvesting and Crypto Mining Sprints Ahead.pdf

Report Stories from the SOC OneNote MalSpam Detection Response

Report-Stories from the SOC OneNote MalSpam – Detection & Response.pdf

Report Attackers Exploit Unpatched Windows Zero Day Vulnerability

Report-Attackers Exploit Unpatched Windows Zero-Day Vulnerability.pdf

Report Diplomats Beware Cloaked Ursa Phishing With a Twist

Report-Diplomats Beware Cloaked Ursa Phishing With a Twist.pdf

Report Loader activity for Formbook QM18

Report-Loader activity for Formbook QM18.pdf

Report Six Malicious Python Packages in the PyPI Targeting Windows Users

Report-Six Malicious Python Packages in the PyPI Targeting Windows Users.pdf

Report Its Raining Phish and Scams How Cloudflare Pagesdev and Workersdev Domains Get Abused

Report-It’s Raining Phish and Scams – How Cloudflare Pages.dev and Workers.dev Domains Get Abused.pdf

Report The five day job A BlackByte ransomware intrusion case study

Report-The five-day job A BlackByte ransomware intrusion case study.pdf

Report Whats up with Emotet

Report-What’s up with Emotet.pdf

Report Welcome to New York Exploring TA453s Foray into LNKs and Mac Malware

Report-Welcome to New York Exploring TA453's Foray into LNKs and Mac Malware.pdf

Report Unleashing the Viper A Technical Analysis of WhiteSnake Stealer

Report-Unleashing the Viper A Technical Analysis of WhiteSnake Stealer.pdf

Report Malicious ad for USPS fishes for banking credentials

Report-Malicious ad for USPS fishes for banking credentials.pdf

Report BlueNoroff How DPRKs macOS RustBucket Seeks to Evade Analysis and Detection

Report-BlueNoroff How DPRK’s macOS RustBucket Seeks to Evade Analysis and Detection.pdf

Report Honeypot Recon Enterprise Applications Honeypot Unveiling Findings from Six Worldwide Locations

Report-Honeypot Recon Enterprise Applications Honeypot - Unveiling Findings from Six Worldwide Locations.pdf

Report Chinese Threat Actors Targeting Europe in SmugX Campaign

Report-Chinese Threat Actors Targeting Europe in SmugX Campaign.pdf

Report Crysis Threat Actor Installing Venus Ransomware Through RDP

Report-Crysis Threat Actor Installing Venus Ransomware Through RDP.pdf

Report Technical Analysis of Bandit Stealer

Report-Technical Analysis of Bandit Stealer.pdf

Report The suspected Maha grass organization uses the WarHawk backdoor variant Spyder to spy on many countries

Report-The suspected Maha grass organization uses the WarHawk backdoor variant Spyder to spy on many countries.pdf

Report Rhysida Ransomware RaaS Crawls Out of Crimeware Undergrowth to Attack Chilean Army

Report-Rhysida-Ransomware-RaaS-Crawls-Out-of-Crimeware-Undergrowth-to-Attack-Chilean-Army.pdf

Report Decrypted Akira Ransomware full

Report-Decrypted Akira Ransomware_full.pdf

Report Proxyjacking The Latest Cybercriminal Side Hustle

Report-Proxyjacking The Latest Cybercriminal Side Hustle.pdf

Report Malvertising Used as Entry Vector for BlackCat Actors Also Leverage SpyBoy Terminator

Report-Malvertising Used as Entry Vector for BlackCat, Actors Also Leverage SpyBoy Terminator.pdf

Report The DPRK strikes using a new variant of RUSTBUCKET

Report-The DPRK strikes using a new variant of RUSTBUCKET.pdf

Report Anatsa banking Trojan hits UK US and DACH with new campaign

Report-Anatsa banking Trojan hits UK, US and DACH with new campaign.pdf

Report New Fast Developing ThirdEye Infostealer Pries Open System Information FortiGuard Labs

Report-New Fast-Developing ThirdEye Infostealer Pries Open System Information FortiGuard Labs.pdf

Report JokerSpy Unknown Adversary Targeting Organizations with Multi Stage macOS Malware

Report-JokerSpy Unknown Adversary Targeting Organizations with Multi-Stage macOS Malware.pdf

Report Manic Menagerie 20 The Evolution of a Highly Motivated Threat Actor

Report-Manic Menagerie 2.0 The Evolution of a Highly Motivated Threat Actor.pdf

Report GuLoader Campaign Targets Law Firms in the US

Report-GuLoader Campaign Targets Law Firms in the US.pdf

ModiLoader style infection for Remcos RAT

ModiLoader-style infection for Remcos RAT.pdf

Report Analysis of attack activities of APT C 26 Lazarus organization using fake VNC software full

Report-Analysis of attack activities of APT-C-26 (Lazarus) organization using fake VNC software_full.pdf

Report Meduza Stealer or The Return of The Infamous Aurora Stealer

Report-Meduza Stealer or The Return of The Infamous Aurora Stealer.pdf

Rhysida Ransomware RaaS Crawls Out of Crimeware Undergrowth to Attack Chilean Army

Rhysida Ransomware RaaS Crawls Out of Crimeware Undergrowth to Attack Chilean Army.pdf

Report An Overview of the Different Versions of the Trigona Ransomware

Report-An Overview of the Different Versions of the Trigona Ransomware.pdf

Report PindOS New JavaScript Dropper Delivering Bumblebee and IcedID

Report-PindOS New JavaScript Dropper Delivering Bumblebee and IcedID.pdf

Report Detecting Popular Cobalt Strike Malleable C2 Profile Techniques

Report-Detecting Popular Cobalt Strike Malleable C2 Profile Techniques.pdf

Report Email Spam with Attachment Modiloader

Report-Email Spam with Attachment Modiloader.pdf

Report Neo Net The Kingpin of Spanish eCrime

Report-Neo_Net The Kingpin of Spanish eCrime.pdf

Report Void Rabisus Use of RomCom Backdoor Shows a Growing Shift in Threat Actors Goals

Report-Void Rabisu’s Use of RomCom Backdoor Shows a Growing Shift in Threat Actors’ Goals.pdf

Report Operation Triangulation campaign exploit 0 day vulnerabilities on Apple mobile devices

Report- Operation Triangulation campaign exploit 0-day vulnerabilities on Apple mobile devices.pdf

Report IcedID Macro Ends in Nokoyawa Ransomware

Report-IcedID Macro Ends in Nokoyawa Ransomware.pdf

Report Unmasking GUI Vil Financially Motivated Cloud Threat Actor

Report-Unmasking GUI-Vil Financially Motivated Cloud Threat Actor.pdf

Report Analysis of the CloudWizard APT framework

Report-Analysis of the CloudWizard APT framework.pdf

Report APT28 leverages multiple phishing techniques to target Ukrainian civil society

Report-APT28 leverages multiple phishing techniques to target Ukrainian civil society.pdf

Report CloudWizard APT the bad magic story goes on

Report-CloudWizard APT the bad magic story goes on.pdf

Report Bluenoroffs RustBucket campaign

Report-Bluenoroff’s RustBucket campaign.pdf

Report Emerging Threat Exposing JOKERSPY

Report-Emerging Threat! Exposing JOKERSPY.pdf

Report Why Malware Crypting Services Deserve More Scrutiny

Report-Why Malware Crypting Services Deserve More Scrutiny.pdf

Report Analysis Aurora Stealer

Report-Analysis Aurora Stealer.pdf

Report Threat Group Assessment Muddled Libra

Report-Threat Group Assessment Muddled Libra.pdf

Report Analysis of Ransomware With BAT File Extension Attacking MS SQL Servers Mallox

Report-Analysis of Ransomware With BAT File Extension Attacking MS-SQL Servers (Mallox).pdf

Report Kimsuky Distributing CHM Malware Under Various Subjects

Report-Kimsuky Distributing CHM Malware Under Various Subjects.pdf

Report RedEyes Group Wiretapping Individuals APT37

Report-RedEyes Group Wiretapping Individuals (APT37).pdf

Report Hackers Use Weaponized PDF Files to Attack Organizations

Report-Hackers Use Weaponized PDF Files to Attack Organizations.pdf

Report Cadet Blizzard emerges as a novel and distinct Russian threat actor Microsoft Security Blog

Report-Cadet Blizzard emerges as a novel and distinct Russian threat actor Microsoft Security Blog.pdf

Report Condi DDoS Botnet Spreads via TP Links CVE 2023 1389

Report-Condi DDoS Botnet Spreads via TP-Link's CVE-2023-1389.pdf

Report Terminator EDR Killer Spyboy Detecting and Preventing a Windows BYOVD Attack

Report-Terminator EDR Killer (Spyboy) Detecting and Preventing a Windows BYOVD Attack.pdf

Report Analyzing a YouTube Sponsorship Phishing Mail and Malware Targeting Content Creators

Report-Analyzing a YouTube Sponsorship Phishing Mail and Malware Targeting Content Creators.pdf

Report Dissecting TriangleDB a Triangulation spyware implant

Report-Dissecting TriangleDB, a Triangulation spyware implant.pdf

Report Graphican Flea Uses New Backdoor in Attacks Targeting Foreign Ministries

Report-Graphican Flea Uses New Backdoor in Attacks Targeting Foreign Ministries.pdf

Report Shampoo A New ChromeLoader Campaign full

Report-Shampoo A New ChromeLoader Campaign_full.pdf

Report ChamelGang and ChamelDoH A DNS over HTTPS implant

Report-ChamelGang and ChamelDoH A DNS-over-HTTPS implant.pdf

Report Formbook from Possible ModiLoader DBatLoader

Report-Formbook from Possible ModiLoader (DBatLoader).pdf

Report Xneelo Users Targeted in a Multi stage Phishing Attack

Report-Xneelo Users Targeted in a Multi-stage Phishing Attack.pdf

Report Lazarus Threat Group Exploiting Vulnerability of Korean Finance Security Solution

Report-Lazarus Threat Group Exploiting Vulnerability of Korean Finance Security Solution.pdf

Report Mystic Stealer Evolving stealth Malware

Report-Mystic Stealer – Evolving “stealth” Malware.pdf

Report Tracking Diicot an emerging Romanian threat actor

Report-Tracking Diicot an emerging Romanian threat actor.pdf

Report New Malware Campaign Targets LetsVPN Users

Report-New Malware Campaign Targets LetsVPN Users.pdf

Report Fake security researchers push malware files on GitHub

Report-Fake security researchers push malware files on GitHub.pdf

Report CVE 2023 34362 MOVEit Transfer SQL Injection Vulnerability Threat Brief

Report-CVE-2023-34362 MOVEit Transfer SQL Injection Vulnerability Threat Brief.pdf

Report Shuckworm Inside Russias Relentless Cyber Campaign Against Ukraine

Report-Shuckworm Inside Russia’s Relentless Cyber Campaign Against Ukraine.pdf

Report CVE 2017 9248 Exploitation in US Government IIS Server

Report-CVE-2017-9248 Exploitation in U.S. Government IIS Server.pdf

Report Android Malware Impersonates ChatGPT Themed Applications

Report-Android Malware Impersonates ChatGPT-Themed Applications.pdf

Report Barracuda ESG Zero Day Vulnerability CVE 2023 2868 Exploited Globally by Aggressive and Skilled Actor Suspected Links to China

Report-Barracuda ESG Zero-Day Vulnerability (CVE-2023-2868) Exploited Globally by Aggressive and Skilled Actor, Suspected Links to China.pdf

Report Pirated Windows builds with crypto stealer that penetrates EFI partition

Report-Pirated Windows builds with crypto stealer that penetrates EFI partition.pdf

Report Brand Impersonation Campaign Targeting Big Brands

Report-Brand Impersonation Campaign Targeting Big Brands.pdf

Report The Phantom Menace Brute Ratel remains rare and targeted

Report-The Phantom Menace Brute Ratel remains rare and targeted.pdf

Report A Truly Graceful Wipe Out

Report-A Truly Graceful Wipe Out.pdf

Report Zero Day Vulnerability in Barracuda Email Security Gateway Appliance ESG CVE 2023 2868

Report-Zero Day Vulnerability in Barracuda Email Security Gateway Appliance (ESG) (CVE-2023-2868).pdf

Report Sneaky DoubleFinger loads GreetingGhoul targeting your cryptocurrency

Report-Sneaky DoubleFinger loads GreetingGhoul targeting your cryptocurrency.pdf

Core Werewolf against the defense industry and critical infrastructure

Core Werewolf against the defense industry and critical infrastructure.pdf

Report Stealth Soldier Backdoor Used in Targeted Espionage Attacks in North Africa

Report-Stealth Soldier Backdoor Used in Targeted Espionage Attacks in North Africa.pdf

Report RomCom Resurfaces Targeting Politicians in Ukraine and US Based Healthcare Providing Aid to Refugees from Ukraine

Report-RomCom Resurfaces Targeting Politicians in Ukraine and U.S.-Based Healthcare Providing Aid to Refugees from Ukraine.pdf

Report Analysis of the RecordBreaker secret stealing Trojan spread through video sites

Report-Analysis of the RecordBreaker secret-stealing Trojan spread through video sites.pdf

Report DynamicRAT A full fledged Java Rat

Report-DynamicRAT — A full-fledged Java Rat.pdf

Report Asylum Ambuscade crimeware or cyberespionage

Report-Asylum Ambuscade crimeware or cyberespionage.pdf

Report StopRansomware CL0P Ransomware Gang Exploits CVE 2023 34362 MOVEit Vulnerability

Report-#StopRansomware CL0P Ransomware Gang Exploits CVE-2023-34362 MOVEit Vulnerability.pdf

Report MOVEit Transfer Exploited to Drop File Stealing SQL Shell

Report-MOVEit Transfer Exploited to Drop File-Stealing SQL Shell.pdf

Report ITG10 Likely Targeting South Korean Entities of Interest to the Democratic Peoples Republic of Korea DPRK

Report-ITG10 Likely Targeting South Korean Entities of Interest to the Democratic People’s Republic of Korea (DPRK).pdf

CVE 2023 34362 MOVEit Transfer SQL Injection Vulnerability Threat Brief

CVE-2023-34362 MOVEit Transfer SQL Injection Vulnerability Threat Brief.pdf

Report Kimsuky Strikes Again New Social Engineering Campaign Aims to Steal Credentials and Gather Strategic Intelligence

Report-Kimsuky Strikes Again New Social Engineering Campaign Aims to Steal Credentials and Gather Strategic Intelligence.pdf

Report Trustwave Action Response Zero Day Exploitation of MOVEit CVE 2023 34362

Report-Trustwave Action Response Zero Day Exploitation of MOVEit (CVE-2023-34362).pdf

Report Recent Satacom campaign delivers cryptocurrency stealing addo

Report-Recent Satacom campaign delivers cryptocurrency-stealing addo.pdf

Report Critical Vulnerability in Progress MOVEit Transfer Technical Analysis and Recommendations

Report-Critical Vulnerability in Progress MOVEit Transfer Technical Analysis and Recommendations.pdf

Report Terminator antivirus killer is a vulnerable Windows driver in disguise

Report-Terminator antivirus killer is a vulnerable Windows driver in disguise.pdf

Report Analysis of new active malware MediaArena PUA full

Report-Analysis of new active malware MediaArena - PUA_full.pdf

Report Investigating BlackSuit Ransomwares Similarities to Royal full

Report-Investigating BlackSuit Ransomware’s Similarities to Royal_full.pdf

Report COSMICENERGY New OT Malware Possibly Related To Russian Emergency Response Exercises 2

Report-COSMICENERGY-New-OT-Malware-Possibly-Related-To-Russian-Emergency-Response-Exercises (2).pdf

Report Old Wine in the New Bottle Mirai Variant Targets Multiple IoT Devices

Report-Old Wine in the New Bottle Mirai Variant Targets Multiple IoT Devices.pdf

Report Buhti New Ransomware Operation Relies on Repurposed Payloads

Report-Buhti New Ransomware Operation Relies on Repurposed Payloads.pdf

Report Peoples Republic of China State Sponsored Cyber Actor Living off the Land to Evade Detection

Report-People's Republic of China State-Sponsored Cyber Actor Living off the Land to Evade Detection.pdf

Report Volt Typhoon targets US critical infrastructure with living off the land techniques

Report-Volt Typhoon targets US critical infrastructure with living-off-the-land techniques.pdf

Report The distinctive rattle of APT SideWinder

Report-The distinctive rattle of APT SideWinder.pdf

Report AndoryuBots DDOS Rampage full

Report-AndoryuBot’s DDOS Rampage_full.pdf

Report CACTUS ransomware

Report-CACTUS ransomware.pdf

Report Threat Actors Using Fake QuickBooks Software to Scam Organizations

Report-Threat Actors Using Fake QuickBooks Software to Scam Organizations.pdf

Report LokiLocker a Ransomware Similar to BlackBit Being Distributed in Korea

Report-LokiLocker, a Ransomware Similar to BlackBit Being Distributed in Korea.pdf

Phishing Campaign uses Meme Filled Code to Drop XWorm Payloads

Phishing Campaign uses Meme-Filled Code to Drop XWorm Payloads.pdf

Report Malicious Actors Exploit CVE 2023 27350 in PaperCut MF and NG

Report-Malicious Actors Exploit CVE-2023-27350 in PaperCut MF and NG.pdf

Report New phishing as a service tool Greatness already seen in the wild

Report-New phishing-as-a-service tool “Greatness” already seen in the wild.pdf

Report Hypervisor Ransomware Multiple Threat Actor Groups Hop on Leaked Babuk Code to Build ESXi Lockers

Report-Hypervisor Ransomware Multiple Threat Actor Groups Hop on Leaked Babuk Code to Build ESXi Lockers.pdf

Report Sophisticated DarkWatchMan RAT Spreads Through Phishing Sites

Report-Sophisticated DarkWatchMan RAT Spreads Through Phishing Sites.pdf

Report Uncovering RedStinger Undetected APT cyber operations in Eastern Europe since 2020

Report-Uncovering RedStinger - Undetected APT cyber operations in Eastern Europe since 2020.pdf

Report ChatGPT Themed Scam Attacks Are on the Rise

Report-ChatGPT-Themed Scam Attacks Are on the Rise.pdf

Report APT C 36 Blind Eagle Group Deploys LimeRAT Components Against Colombia

Report-APT-C-36 (Blind Eagle) Group Deploys LimeRAT Components Against Colombia.pdf

Report Ukraine remains Russias biggest cyber focus in 2023

Report-Ukraine remains Russia’s biggest cyber focus in 2023.pdf

Report CVE 2022 26134 Threat Brief Atlassian Confluence RCE Vulnerability

Report-CVE-2022-26134 Threat Brief Atlassian Confluence RCE Vulnerability.pdf