Do Son
At a glance Malware family SHEETCREEP (SHEET#CREEP), C# .NET RAT Threat actor APT36 / Transparent Tribe (suspected,...
C2
The Lat61 Threat Intelligence Team has pulled back the curtain on DesckVB RAT, a highly active and...
Security researchers at StepSecurity have sounded the alarm on a compromised version of the @velora-dex/sdk package. On...
A massive, years-long cyber espionage campaign has been successfully dismantled. Recently, a coordinated effort led by the...
Elastic Security Labs has uncovered a sophisticated new Windows backdoor that leverages the trusted infrastructure of Google...
Palo Alto Networks’ Unit 42 Threat Intelligence team has uncovered a sophisticated new malware family dubbed Airstalk,...
A new joint analysis by Mandiant Threat Defense and Google Threat Intelligence Group (GTIG) has exposed a...
Google Threat Intelligence Group (GTIG) has uncovered a new campaign by the North Korean threat actor UNC5342,...
The eSentire Threat Response Unit (TRU) identified a new Rust-based backdoor—dubbed ChaosBot—deployed inside a financial services organization’s...
The WARMCOOKIE backdoor has resurfaced with new features, expanded infrastructure, and updated delivery mechanisms, according to a...
The Infoblox Threat Intelligence team has released an in-depth report on a global malware campaign leveraging the...
A new analysis from Silent Push Threat Analysts highlights the growing misuse of publicly rentable subdomain providers,...
Security researchers at Insikt Group have uncovered a major advancement in the operations of a newly designated...
Socket’s Threat Research Team has uncovered an alarming wave of malicious Go packages—some still live on GitHub—designed...
In its latest threat intelligence report, CYFIRMA has detailed the discovery of EdskManager RAT, a sophisticated remote...
In a recent analysis, AhnLab’s Security Intelligence Center (ASEC) has uncovered an emerging threat targeting misconfigured and...
Researchers from Unit 42 at Palo Alto Networks have uncovered a novel backdoor—HazyBeacon—used by a threat cluster...
APT41—also known as BARIUM, Wicked Panda, and Brass Typhoon—is a well-known Chinese state-sponsored APT group notorious for...
In an example of cloud service abuse, Google Threat Intelligence Group (GTIG) has uncovered a new APT41...
In a new and deeply evasive malware campaign, cybercriminals are leveraging the PyBitmessage protocol to hide a...