Do Son Intrinsec reveals shared infrastructure between Eye Pyramid C2 and ransomware groups like Rhysida and Vice Society in new threat intelligence report.
Cobalt Strike
Sophos researchers detail a complex campaign using Cobalt Strike, DLL sideloading, and clever techniques like expired certificates
Uncover the details of Operation HollowQuill, which targets defense institutions using weaponized documents for infiltration.
Explore the BlackSuit ransomware case: a cyberattack using a fake Zoom download to infiltrate corporate networks.
Explore the new Betruger backdoor used by RansomHub affiliates in ransomware attacks. Discover its unique functionalities.
The campaign involves the deployment of a modified version of the Cobalt Strike penetration testing tool, delivered via a Rust-compiled loader
Learn about the fight against Unauthorized Cobalt Strikes and how a coalition reduced them by 80% to combat cybercrime.
Uncover the PHP-CGI vulnerability exploited in cyberattacks across Japan. Learn about the risks and impact on organizations.
Explore the latest Ghostwriter campaign targeting Ukrainian military and government with weaponized Excel documents.
Uncover the details of a newly identified cyberespionage campaign, CL-STA-0048, targeting high-value organizations in South Asia.
Discover the sophisticated LockBit ransomware operation leveraging Cobalt Strike beacons and proxy tools. Learn how it infiltrated systems and the impact it had.
Learn about the sophisticated cyber-espionage tactics of the New OceanLotus group. Discover how they target critical sectors with advanced techniques and leverage zero-day vulnerabilities.
Learn about the collaboration of Play ransomware with the Andariel group. Explore the tactics used in this sophisticated cyber attack.
Learn about the latest LODEINFO malware campaign attributed to the Earth Kasha threat group, targeting government agencies and high-tech industries in Japan, Taiwan, and India.
Explore the cyber-espionage campaign by TAG-112 against the Tibetan community. Discover how they used malicious JavaScript to distribute malware.
Uncover the intricate cyberespionage campaign of Earth Estries. Learn how this group targets governments and technology firms with sophisticated attack chains.
Get insights into Operation Cobalt Whisper, a cyber-espionage campaign targeting defense, research, and technical sectors in South Asia.
Explore WarmCookie, a highly adaptive malware family that targets organizations across sectors. Learn about its range of functionalities and infection methods.
Discover GoffLoader, the revolutionary tool that empowers security professionals to execute BOF and Cobalt Strike PE files directly in memory.
Uncover the details of the Voldemort malware campaign that targeted over 70 organizations worldwide with sophisticated techniques.
Discover the concerning expansion of Earth Baku, a sophisticated APT group. Learn about their tactics, targets, and their recent campaigns in Europe, the Middle East, and Africa.
Discover the details of a recent cyberattack targeting a Taiwanese research institute, believed to be carried out by the Chinese state-sponsored group APT41