Research reports

Vendor, government and researcher reports that CyberSIXT links from its coverage, with their publishers and topics.

1,233 reports388 publishers50 added in the past week

541–560 of 1,024 reports · page 28 of 52 · Clear filters

Added Tue 5 May

cylance.com · Web page · Added 5 May
Ending Cyber Risk with Aurora Endpoint Security - Arctic Wolf
Arctic Wolf®, the leader in security operations, has acquired Cylance, a pioneer of AI-based endpoint security. With this acquisition, Arctic Wolf ushers in a new era of simplicity and efficacy to the endpoint security market that will deliver the security…
Original (new tab)
BleepingComputer · Web page · Published 24 Dec
Maze Ransomware Releases Files Stolen from City of Pensacola
The actors behind the Maze Ransomware have released 2GB of files that were allegedly stolen from the City of Pensacola during their ransomware attack. Earlier this month, the City of Pensacola was hit with a ransomware attack that impacted the city's email…
Ransomware Original (new tab)
certego.github.io · Web page · Added 5 May
Lumma Stealer
Reading tip: Clicking on the image allows viewing it in full resolution for improved readability. Summary Introduction Lumma Stealer overview Global Threat Record growth Campaigns Persistence Defense evasion Telegram as marketplace for stolen logs First stage…
Infostealers Original (new tab)
Group-IB · Web page · Added 5 May
We see you, Gozi
The ISFB Trojan also known as Gozi ISFB first appeared in 2014. It is based on Gozi, which was released in 2006 and developed by Russian threat actors. Gozi was designed to collect network traffic and steal credentials from browsers and email clients. It has…
Malware Original (new tab)
threatvector.cylance.com · Web page · Published 1 May
Blog | Arctic Wolf
Updated May 1 Anthropic has officially launched Claude Security, moving its AI‑driven code vulnerability detection, validation, and patching capabilities from a limited research preview into public beta. Improving software security before code ships is a…
Original (new tab)
Group-IB · Web page · Added 5 May
Craxs Rat, the master tool behind fake app scams and banking fraud
Since April 2023, a series of scams involving fake Android apps have targeted Singapore. These fake apps are banking trojans used to harvest victims’ banking credentials and personal information, as well as to take control of their devices. In this specific…
Malware Mobile Original (new tab)
Medium · Web page · Published 17 Jul
Dissecting the ClickFix User-Execution Attack and Its Sophisticated Persistence via ADS
The following analysis presents how an adversary tackled the challenge of malware delivery using a set of techniques that stand out due to their specificity and operational precision. The post is not intended to comprehensively describe the entire campaign or…
Original (new tab)
Group-IB · Web page · Added 5 May
Cat’s out of the bag: Lynx Ransomware-as-a-Service
Ransomware remains one of the most profitable cyberthreats, with new variants and business models evolving faster than many organizations can respond. Fueled by the expansion of Ransomware-as-a-Service (RaaS), the proliferation of stolen data on Dedicated…
Ransomware Original (new tab)
logpoint.com · Web page · Added 5 May
Emerging Threat: AgentTesla – A Review and Detection Strategies
It has been spreading rapidly in the wild with CISA listing it in the Top Malware Strains list for the year 2021 and it still is in the top 10 list on MalwareBazaar as of March 2023. The operators of AgentTesla are providing Malware-as-a-Service with various…
Malware Original (new tab)
notion.so · Web page · Added 5 May
[S2W LAB] Analysis of Clop Ransomware suspiciously related to the Recent Incident
랜섬노트 (Ransom Note) 확인결과, 다크웹 상에서 유출 데이터를 공개하는 기존 Clop 랜섬웨어의 유출 사 이트에 있는 컨택 포인트(Email)와 동일함을 확인 동일한 서명 정보를 갖는 Clop Ransomware를 Virustotal에서 추가 발견 (Build time: 11월 21일) 정확한 유포 방식은 현재 조사 중으로 확인된 바 없으나 과거 Clop Ransomware 공격 사례
Ransomware Original (new tab)
forum.malekal.com · Web page · Published 6 Mar
Virus Ukash Gendarmerie Absence twexx32.dll
Aide à la désinfection pour supprimer les virus, adwares, ransomwares, trojans. Modérateurs : Mods Windows, Helper Surfcop Virus Ukash Gendarmerie Absence twexx32.dll par Surfcop » 06 mars 2012 21:48 Bonsoir à tous, Voilà le pc de la boîte s'est fait infecté…
Original (new tab)
Group-IB · Web page · Added 5 May
IcedID: new malware version
What did malware analysts think when they first heard the words IcedID and BokBot? Undoubtedly things like: web injects, proxy servers, quick version updates… The updates were sometimes so fast that while analysts were studying the current version, a new one…
Malware Original (new tab)
Group-IB · Web page · Added 5 May
Group-IB uncovers Android Trojan named «Gustuff» capable of targeting more than 100 global banking apps, cryptocurrency and marketplace applications
Group-IB, an international company that specializes in preventing cyberattacks, has detected activity of Gustuff a mobile Android Trojan, which includes potential targets of customers in leading international banks, users of cryptocurrency services, popular…
Malware Mobile Original (new tab)
ThreatFabric · Web page · Published 1 Oct
BianLian - from rags to riches, the malware dropper that had a dream
Recently, while analyzing our daily portion of APK files, searching for the new banking related threats, we found a sample that was standing out among the others. While being seemingly benign, the sample was downloading and installing the infamous Anubis…
Malware Mobile Original (new tab)
Check Point · Web page · Published 20 Sep
Behind the Scenes of BBTok: Analyzing a Banker’s Server Side Components
Check Point Research recently discovered an active campaign operating and deploying a new variant of the BBTok banker in Latin America. In the research, we highlight newly discovered infection chains that use a unique combination of Living off the Land…
Original (new tab)
Medium · Web page · Published 2 Dec
Approaching stealers devs : a brief interview with Amadey
To completely understand what’s going on in a market that has been growing in the last years I found mandatory to know which players are dominating it. Always remember that behind every user of the Internet there is another human like you, so if you can be…
Infostealers Original (new tab)
Group-IB · Web page · Added 5 May
ATT&CKing ProLock Ransomware
The success of enterprise ransomware attacks has motivated more and more threat actors to join the game. One of these new players is ProLock ransomware. The locker emerged in March 2020 as the successor of PwndLocker, which began operating in late 2019 and…
Ransomware Original (new tab)
Group-IB · Web page · Added 5 May
Inside the Hive
In the first 11 months of 2021, over 60% of all incidents investigated by Group-IB involved ransomware. Ransomware has finally established itself as cyber threat number one. In July 2021, international media reported that REvil ransomware operators demanded a…
Ransomware Original (new tab)
Medium · Web page · Published 13 Jul
Matryoshka : Variant of ROKRAT, APT37 (Scarcruft)
- Scarcruft(a.k.a APT37, Group123)는 북한 배후로 알려진 위협그룹으로 2012년부터 현재까지 지속 적인 공격 활동이 포착되고 있음 Overview Press enter or click to view image in full size
State-sponsored Original (new tab)
systemweakness.com · Web page · Published 20 Dec
A “??????t??????a????????????e ??????o????????????” Smishing Campaign that changes behaviour based on User-Agent, and abuses…
A “𝙨t𝙧a𝗇𝗀e 𝙛o𝙣𝗍” Smishing Campaign that changes behaviour based on User-Agent, and abuses… By Lena 8 min read Jan 23, 2023 Recently in Japan, there has been an increase in Smishing attacks that uses a strange font. This got me wondering what was behind…
Phishing Original (new tab)

Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.