Research reports

Vendor, government and researcher reports that CyberSIXT links from its coverage, with their publishers and topics.

1,233 reports388 publishers50 added in the past week

281–300 of 353 reports · page 15 of 18 · Clear filters

Added Mon 6 Apr

Unit 42 · Web page · Published 11 Jul
Evolving Tactics of SLOW#TEMPEST: A Deep Dive Into Advanced Malware Techniques
In late 2024, we discovered a malware variant related to the SLOW#TEMPEST campaign. In this research article, we explore the obfuscation techniques employed by the malware authors. We deep dive into these malware samples and highlight methods and code that…
Malware Original (new tab)
ETDA Threat Group Cards · Web page · Added 6 Apr
Threat Group Cards: A Threat Actor Encyclopedia
Home > List all groups > List all tools > List all groups using tool Sword2033 Tool: Sword2033 Names Sword2033 Category Malware Type Backdoor, Downloader, Exfiltration Description (Palo Alto) Pivoting on the C2 domain, we identified one additional sample that…
Malware Original (new tab)
Malpedia · Web page · Added 6 Apr
FinFisher (Malware Family)
Source: https://malpedia.caad.fkie.fraunhofer.de/details/apk.finfisher
Malware Mobile Original (new tab)
Mandiant (Google) · Web page · Published 7 Jun
A Totally Tubular Treatise on TRITON and TriStation
In December 2017, FireEye's Mandiant discussed an incident response involving the TRITON framework. The TRITON attack and many of the publicly discussed ICS intrusions involved routine techniques where the threat actors used only what is necessary to succeed…
Malware Original (new tab)
deepinstinct.com · Web page · Published 2 Apr
New ServHelper Variant Employs Excel 4.0 Macro to drop Singed Payload
ServHelper is a recently discovered backdoor associated with TA505. A veteran threat group that has also been associated with the infamous Dridex banking malware, the GlobeIimposter ransomware, and other high-profile malware campaigns. Deep Instinct Threat…
Malware Original (new tab)

Added Sun 5 Apr

ETDA Threat Group Cards · Web page · Added 5 Apr
Threat Group Cards: A Threat Actor Encyclopedia
Home > List all groups > List all tools > List all groups using tool Karkoff Tool: Karkoff Names Karkoff MailDropper DropperBackdoor CACTUSPIPE OILYFACE Category Malware Type Backdoor, Dropper Description (Talos) In April, Cisco Talos identified an…
Malware Original (new tab)
contagiodump.blogspot.com · Web page · Added 5 Apr
contagio
Contagio is a collection of the historic malware samples, threats, observations, and analyses. Malware samples are available for download by any responsible whitehat researcher. By downloading the samples, anyone waives all rights to claim punitive,…
Malware Original (new tab)
HarfangLab · Web page · Added 5 Apr
Inside The Lab
Identifier: TRR250601. Summary This report examines recent activities we attribute to the XDSpy threat actor, focusing on an ongoing campaign targeting Eastern European and Russian governmental entities using the XDigo malware, dating back to March 2025. Our…
State-sponsored Malware Original (new tab)
deepinstinct.com · Web page · Published 21 Sep
LockBit 2.0 Ransomware Becomes LockFile Ransomware with a Never-Before-Seen Encryption Method
Threat actors are constantly improving their attack mechanisms to gain an advantage over cybersecurity defenses. Sometimes this involves new malware; other times this means making iterative adjustments to previously successful malware to exploit new…
Ransomware Malware Vulnerabilities Original (new tab)
Intel 471 · Web page · Published 1 Apr
TA505’s modified loader means new attack campaign could be coming
After months of inactivity, hacking group TA505's Get2 Loader has sprung back into operation, possibly signaling that the group is ready for a new round of malicious activity. On December 14, 2020, the Get2 loader had resurfaced with new download and execute…
Malware Original (new tab)
Fortinet · Web page · Published 5 Apr
Analysis of New Agent Tesla Spyware Variant
Recently, FortiGuard Labs captured a new malware sample that was spread via Microsoft Word documents. After some quick research, I discovered that this was a new variant of the Agent Tesla spyware. I analyzed another sample of this spyware last June and…
Malware Original (new tab)

Added Thu 2 Apr

ETDA Threat Group Cards · Web page · Added 2 Apr
Threat Group Cards: A Threat Actor Encyclopedia
Home > List all groups > List all tools > List all groups using tool Janeleiro Tool: Janeleiro Names Janeleiro Category Malware Type Banking trojan, Backdoor, Keylogger, Info stealer, Credential stealer Description (ESET) This new threat, which we’ve named…
Malware Infostealers Original (new tab)

Added Wed 1 Apr

Trend Micro · PDF · Added 1 Apr
Operation Poisoned News: Hong Kong Users Targeted with Mobile Malware via Local News Links
By Elliot Cao, Joseph C. Chen, William Gamazo Sanchez, Lilang Wu, and Ecular Xu Contents 1 Attack Chain 1.1 Watering hole attack tactic 1.2 Infection chain 2 Exploits Analyses 2.1 The JavaScriptCore exploit 2.1.1 Bug triggering 2.1.2 The addrof/fakeobj…
Malware Vulnerabilities Mobile Original (new tab)

Added Tue 24 Mar

Virus Bulletin · PDF · Added 24 Mar
Google-Calendar-as-C2-infrastructure-a-China-nexus-campaign-with-stealthy-tactics.pdf
GOOGLE CALENDAR AS C2 INFRASTRUCTURE: A CHINA-NEXUS CAMPAIGN... CHEN & HSU 2 VIRUS BULLETIN CONFERENCE SEPTEMBER 2025 ABSTRACT In recent years, China-nexus threat groups have increasingly adopted tactics to obscure their malware footprint, particularly…
Malware Original (new tab)

Added Thu 5 Mar

ClearSky · PDF · Added 5 Mar
ClearSky report on BadPaw and MeowMeow Russian malware
P a g e 2 ClearSky Team has identified a targeted Russian cyber campaign against Ukraine utilizing two novel malware strains, BadPaw and MeowMeow. The attack chain initiates with a phishing email containing a link to a ZIP archive. Once extracted, an initial…
Malware Original (new tab)

Added Wed 7 Jan

45734016.fs1.hubspotusercontent-na1.net · PDF · Added 7 Jan
Pulsar RAT Technical Malware Analysis Report
" Ge ANTI VM & SANDBOX PERSISTENCE i: PULSAR RAT schtask.exe A VICTIM C2 SERVER PULSAR RAT TECHNICAL & MALWARE ANALYSIS DIAMOND MODEL Adversary NW Open Source / Public Project YV Pulsar - Github QP Kingkoot - Lead Developer Capabilities Infrastructure NW Cre
Malware Original (new tab)

Added Wed 31 Dec 2025

controlware.de · PDF · Added 31 Dec
Beyond Potentially Unwanted Apps: Malware Behind Fake PDF Converters
Author: Serkan Sirmaci, Cyber Security Analyst @ Controlware CSIRT Contact: threatreport@controlware.de www.controlware.de blog.controlware.de Author: Serkan Sirmaci Version: 1.2 Classification: EXTERN Status: December 2025 Status: Final Page 2 von 19…
Malware Original (new tab)

Added Wed 26 Nov 2025

NCSC (UK) · PDF · Added 26 Nov
DAMASCENED PEACOCK
Windows, delivered via spear-phishing. DAMASCENED PEACOCK A lightweight, staged downloader targeting Windows, delivered via spear-phishing. Executive summary • DAMASCENED PEACOCK is a lightweight downloader targeting Windows. • The analysed sample was for…
Malware Phishing Original (new tab)

Added Sat 22 Nov 2025

seqrite.com · PDF · Added 22 Nov
SQ_White Paper_Wrap
Warp is a potent malware written in the GO programming language, designed to load payloads and ex-filtrate sensitive information via Telegram. As new variants emerge daily in the current threat landscape to steal sensitive information from infected systems,…
Malware Infostealers Original (new tab)

Added Thu 30 Oct 2025

gov.il · PDF · Added 30 Oct
ALERT-CERT-IL-W-1907.pdf
Malware Original (new tab)

Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.