Malware · publisher
Check Point
42 reports on malware · 101 reports in all
Every mark is a report, newest first. A report opens on its page here, which links to the original.
All of Check Point in Research reportsEvery one of the 42 is a mark on the map. Named now: 1 to 26, newest first.
- Not All That Glitters Is Gold: Tracking CopperDragon’s Sparrow Framework Around the Globe
- Impersonation, Click Hijacking, and TDS: Inside a Malware Distribution Ecosystem
- Fast and Furious – Nimbus Manticore Operations During the Iranian Conflict
- Unveiling VoidLink - A Stealthy, Cloud-Native Linux Malware Framework
- Cracking ValleyRAT: From Builder Secrets to Kernel Rootkits
- Iranian Threat Actor Nimbus Manticore Expands Campaigns into Europe with Advanced Malware and Fake Job Lures
- In the Wild: Malware Prototype with Embedded Prompt Injection
- From Trust to Threat: Hijacked Discord Invites Used for Multi-Stage Malware Delivery
- The Evolution of Transparent Tribe’s New Malware
- New BugSleep Backdoor Deployed in Recent MuddyWater Campaigns
- MuddyWater Threat Group Deploys New BugSleep Backdoor
- November 2023’s Most Wanted Malware: New AsyncRAT Campaign Discovered while FakeUpdates Re-Entered the Top Ten after Brief Hiatus
- Malware Spotlight – Into the Trash: Analyzing LitterDrifter
- From Albania to the Middle East: The Scarred Manticore is Listening
- Beyond the Horizon: Traveling the World on Camaro Dragon’s USB Flash Drives
- The Dragon Who Sold His Camaro: Analyzing Custom Router Implant
- VSCode Security: Malicious Extensions Detected- More Than 45,000 Downloads- PII Exposed, and Backdoors Enabled
- Check Point Research reveals a malicious firmware implant for TP-Link routers, linked to Chinese APT group
- Rhadamanthys: The “Everything Bagel” Infostealer
- Pulling the Curtains on Azov Ransomware: Not a Skidsware but Polymorphic Wiper
- 3rd October – Threat Intelligence Report
- Bumblebee: increasing its capacity and evolving its TTPs
- 7 Years of Scarlet Mimic’s Mobile Surveillance Campaign Targeting Uyghurs
- Trickbot Rebirths Emotet: 140,000 Victims in 149 Countries in 10 Months
- SharpPanda: Chinese APT Group Targets Southeast Asian Government With Previously Unknown Backdoor
- Turning Telegram toxic: ‘ToxicEye’ RAT is the latest to use Telegram for command & control
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.