Research reports

Vendor, government and researcher reports that CyberSIXT links from its coverage, with their publishers and topics.

1,259 reports391 publishers75 added in the past week

241–260 of 1,259 reports · page 13 of 63

Added Fri 25 Sep

atlassian.com · Web page · Published 21 Sep
From fake interviews to malicious repositories: Disrupting Contagious Interview
Software developers and IT professionals are increasingly being targeted through fraudulent recruitment processes that exploit their trust in established development platforms. Candidates are invited to complete seemingly legitimate coding assessments hosted…
Original (new tab)

Added Wed 23 Sep

Recorded Future · PDF · Added 23 Sep
BlueDelta Targets Defense and Diplomacy with HOOKEDGE
Insikt Group identified Russian state- BlueDelta delivered HOOKEDGE, a sponsored group BlueDelta (APT28) lightweight batch-script successor targeting government, diplomatic, and to HEADLACE, via macro-enabled defense organizations in Romania, Spain, Word…
Original (new tab)
Zscaler · Web page · Published 21 Sep
Vidar Virtual Machine-Based String Obfuscation
The following sections examine Vidar’s string deobfuscation process, including a lightweight virtual machine and custom stream cipher. Virtual machine deobfuscation In order to obfuscate the malware’s strings in versions 2.x and 3.x, the Vidar developer…
Infostealers Original (new tab)
ESET · Web page · Added 23 Sep
Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances
Cyberespionage has remained a constant feature of Russia’s war against Ukraine. ESET Research has long tracked Gamaredon, one of the most active Russia-aligned advanced persistent threat (APT) groups targeting Ukraine. The group, attributed by the Security…
State-sponsored Original (new tab)
GitHub · Web page · Published 4 Jun
public-research/datasurge/report.md at main · deepfield/public-research
Most Mirai forks spread first and ask questions later. They brute-force telnet, chain CVEs, scan port ranges, and race to claim as many devices as possible before the next reboot clears them from memory. Datasurge does not. It has no propagation scanner, no…
Vulnerabilities Original (new tab)
ESET · Web page · Added 23 Sep
Killing me gently: Inside Gentlemen’s EDR killer framework
ESET researchers analyzed the robust EDR-killing toolset of the ransomware-as-a-service gang Gentlemen. Since the beginning of 2026, Gentlemen has emerged as one of the most active gangs in the ransomware ecosystem. The group distinguishes itself through a…
Ransomware Original (new tab)
ESET · Web page · Added 23 Sep
Beware the SparroWock: The backdoor that bites, the commands that catch
ESET Research’s ongoing monitoring of FamousSparrow has borne fruit once again. Our previous public report on FamousSparrow revealed that this China-aligned APT group had developed two new versions of its custom backdoor named SparrowDoor. This time, we…
Malware Original (new tab)
Mandiant (Google) · Web page · Published 25 Jun
The Latest Addition to Turla’s Intelligence Gathering Apparatus
Google Threat Intelligence Group (GTIG) has conducted an in-depth analysis of a .NET backdoor, tracked as STOCKSTAY, that has been continually developed and deployed by the Russia-linked threat actor Turla (aka SUMMIT, Secret Blizzard, VENOMOUS BEAR,…
State-sponsored Malware Original (new tab)
F6 · Web page · Published 28 Aug
Рагнарёк: F6 исследовала атаки группировки вымогателей VantaCore
Специалисты Лаборатории цифровой криминалистики и исследования вредоносного кода компании F6 сообщают о новой угрозе российскому бизнесу. В августе 2026 года специалистами Лаборатории выявлена активность новой группировки, назвавшей себя VantaCore. Уточнённое…
Original (new tab)

Added Sat 19 Sep

Security Affairs · Web page · Published 14 Aug
Chess.com Leak Exposes 7.3 Million Users – Evidence Points to Scraping
7.3 million Chess.com profiles leaked online: the data is genuine, but evidence points to large-scale scraping, not a server breach. Free is a strange price for stolen data, and that’s exactly what makes this listing worth a second look. A 15.5 GB file…
Original (new tab)
The Record · Web page · Published 17 Sep
Hackers claim breach of Russian election systems days before parliamentary vote
An anonymous hacking group claimed to have broken into computer systems connected to Russia’s election infrastructure just days before the country begins voting for a new parliament. The group, calling itself CikLeak, said it gained access to systems…
Original (new tab)
The Hacker News · Web page · Published 11 Sep
Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection
Anthropic on Thursday revealed it disrupted a campaign mounted by a Russian state-sponsored threat actor that abused Claude for developing an AI-assisted workflow to get ahead of the detection curve. The operation has been attributed to a cyber espionage…
State-sponsored Malware Original (new tab)

Added Thu 17 Sep

Fortinet · Web page · Added 17 Sep
Casbaneiro: A Banking Trojan with Distributed Data-Receiving Servers
Malware Original (new tab)
GitHub · Web page · Added 17 Sep
StealC-Malware-Analysis/Reports/StealC-V2-EN.md at main · Yavuzhanzgen/StealC-Malware-Analysis
This repository is intended solely for malware analysis, reverse engineering research, and educational purposes. All malware samples were analyzed in an isolated laboratory environment. StealC V2 Malware Technical Analysis Static Analysis • Dynamic Analysis •…
Malware Infostealers Original (new tab)

Added Tue 15 Sep

Netresec · Web page · Published 25 Jun
Ping32 RMM and ValleyRAT
The VBScript then dropped the legitimate Remote Monitoring and Management (RMM) tool ManageEngine Endpoint Central. Fareed included the IOCs for the following Endpoint Central server IP addresses: 202.61.160.208 202.61.160.202 202.61.160.201 202.61.160.
Malware Original (new tab)
zerobec.com · Web page · Published 11 Jun
Introducing LX RAT: ITR Phishing Targets Finance and Tech
ZeroBEC researchers uncovered a prolonged phishing and malware campaign that uses Indian Income Tax Return (ITR) refund lures to deliver a multi-stage AutoIt infection chain. The campaign targeted financial and technology organizations and successfully evaded…
Malware Phishing Original (new tab)
cert.orange.pl · Web page · Published 9 Sep
Koktevrat – wieloetapowy Android RAT dystrybuowany pod przykrywką aplikacji MandatGO
Malware Mobile Original (new tab)
Zimperium · Web page · Published 19 Aug
The ToxicPanda Never Sleeps: ToxicPanda 2.0 Prepares its Next Strike on Mobile
The zLabs team recently identified an updated variant of ToxicPanda, the Android banking Trojan known to have primarily targeted Europe, that introduces significant enhancements, including a comprehensive command set of 167 remote commands and substantially…
Mobile Original (new tab)
GitHub · Web page · Added 15 Sep
AsyncRAT-Malware-Analysis/Reports/AsyncRAT-EN.md at main · Yavuzhanzgen/AsyncRAT-Malware-Analysis
This repository is intended solely for malware analysis, reverse engineering research, and educational purposes. All malware samples were analyzed in an isolated laboratory environment. -EN.md at main · -Malware-Analysis AsyncRAT Technical Analysis Report…
Malware Original (new tab)
GitHub · Web page · Added 15 Sep
BabylonRAT-Malware-Analysis/Reports/BabylonRAT-EN.md at main · Yavuzhanzgen/BabylonRAT-Malware-Analysis
This repository is intended solely for malware analysis, reverse engineering research, and educational purposes. All analyses were conducted in an isolated laboratory environment. -EN.md at -Malware-Analysis BabylonRAT Technical Analysis Report Static…
Malware Original (new tab)

Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.