Skip to content

Research reports

Vendor, government and researcher reports that CyberSIXT links from its coverage, with their publishers and topics.

1,233 reports388 publishers50 added in the past week

581–600 of 1,024 reports · page 30 of 52 · Clear filters

Added Fri 1 May

The Record · Web page · Published 17 Jan
Finland says it found NSO's Pegasus spyware on diplomats' phones
The Finnish government said today that the telephones of some of its foreign diplomats were infected last year with Pegasus, a spyware strain developed by controversial Israeli surveillance vendor NSO Group. Finland's Ministry of Foreign Affairs said the…
Mobile Original (new tab)
vadesecure.com · Web page · Added 1 May
Blog
This is your information security hub, providing you with regular updates from the world of cloud security: Recommendations, reports, podcasts, eBooks, surveys, news, and more. Home » Blog Email Security 30 April 2026 How the Booking Phishing Campaign Works…
Phishing Original (new tab)
Group-IB · Web page · Added 1 May
Cobalt Renaissance
On March 26, 2018, Europol reported the arrest of the Cobalt gang leader in Alicante, Spain. The Bank of Russia named Cobalt as the main threat to banks. The scale of its activities is fascinating: according to Europol, the group has been linked to thefts of…
Takedowns and arrests Original (new tab)
WIRED · Web page · Published 20 May
The Full Story of the Stunning RSA Hack Can Finally Be Told
Amid all the sleepless hours that Todd Leetham spent hunting ghosts inside his company’s network in early 2011, the experience that sticks with him most vividly all these years later is the moment he caught up with them. Or almost did. It was a spring…
Original (new tab)
Group-IB · Web page · Added 1 May
Ransomware gang Conti published data of 850 companies
Group-IB, one of the global leaders in cybersecurity and headquartered in Singapore, has today presented its findings about ARMattack, one of the shortest yet most successful campaigns by the Russian-speaking ransomware gang Conti. In slightly more than a…
Ransomware Original (new tab)
Group-IB · Web page · Added 1 May
Group-IB’s new report on Silence: Damage from Silence APT operations increases fivefold
Group-IB, a Singapore-based cybersecurity company that specializes in preventing cyberattacks, has exposed the most recent campaigns carried out by Silence, a Russian-speaking APT group, in the new “Silence 2.0: Going Global” report. Group-IB experts…
State-sponsored Original (new tab)
Group-IB · Web page · Added 1 May
Cron has fallen
A black police vehicle, UAZ Patriot, is accelerating, chasing a cherry Renault Logan and forcing it to the roadside. The taxi driver in the Logan seems agitated, frightened even, accelerates quickly while shifting into higher gears. It has gotten dark; both…
Original (new tab)
Medium · Web page · Published 8 Feb
Kimsuky disguised as a Korean company signed with a valid certificate to distribute Troll Stealer…
S2W threat research and intelligence center Talon has hunted for and analyzed a sample of what is believed to be a new malware from the Kimsuky group on VirusTotal. — The malware was found to be distributed from a page that redirects users to a specific site…
State-sponsored Malware Infostealers Original (new tab)
WIRED · Web page · Published 11 Apr
How Russian Spam King Peter Levashov Was Arrested, and His Kelihos Botnet Dismantled
One of the world’s most notorious spammers appears to have been tripped up by a basic cybersecurity no-no, according to the FBI: He used the same log-in credentials to both run his criminal enterprise and also log into sites like iTunes. The Justice…
Botnets and DDoS Takedowns and arrests Original (new tab)
cisoseries.com · Web page · Published 20 Sep
Cybersecurity News: INC targets healthcare, Providence schools cyberattack, Apple iPads bricked
A warning from Microsoft about a financially motivated threat actor who is using INC ransomware against the U.S. health sector for the first time. The group has been given the name Vanilla Tempest. In a series of posts on X, Microsoft describes its campaign…
Ransomware Original (new tab)
Expel · Web page · Published 22 Apr
Inside Lazarus: How North Korea uses AI to industrialize attacks on developers
This research was also highlighted in WIRED. You can read the full article from Andy Greenberg and Matt Burgess here. TL;DR Expel is actively tracking an APT group that we assess with high confidence to be North Korean (DPRK) state-sponsored. We suspect that…
State-sponsored Original (new tab)
Group-IB · Web page · Added 1 May
Gustuff: Weapon of Mass Infection
“Serious product for individuals with skills and experience,” — that’s how Gustuff was advertised by its seller nicknamed Bestoffer on an underground forum in December 2018. Although the Trojan was developed by a Russian-speaking cybercriminal, Gustuff…
Malware Original (new tab)
Group-IB · Web page · Added 1 May
The Art of Cyberwarfare
In mid-May 2021, experts from SOLAR JSOC and the National Computer Incident Response & Coordination Center (NCIRCC) released a joint report on a series of targeted attacks detected in 2020. According to the report, the attackers targeted Russian federal…
Original (new tab)
Group-IB · Web page · Added 1 May
MoneyTaker: in pursuit of the invisible
In less than two years, this group has conducted over 20 successful attacks on financial institutions and legal firms in the USA, UK and Russia. The group has primarily been targeting card processing systems, including the AWS CBR (Russian Interbank System)…
Original (new tab)
Group-IB · Web page · Added 1 May
Silence: Moving into the Darkside
Group-IB has exposed the attacks committed by Silence cybercriminal group. While the gang had previously targeted Russian banks, Group-IB experts also have discovered evidence of the group’s activity in more than 25 countries worldwide. Group-IB has published…
Original (new tab)
scworld.com · Web page · Published 25 Sep
Austria subjected to pro-Russian DDoS intrusions
More than 40 Austrian organizations had their websites subjected to distributed denial-of-service attacks by pro-Russia hacktivist operations NoName057(16) and OverFlame that have been underway since last week ahead of the country's election on Sunday,…
Botnets and DDoS Original (new tab)
cisoseries.com · Web page · Published 21 Mar
Cyber Security Headlines – March 21, 2022
CISA, FBI tell satellite communications network owners to watch out for hacks after Ukraine attack This alert forms part of CISA’s “Shields Up” program which responds to potential Russian cyberattacks related to the Ukraine conflict. As part of the defense of…
Original (new tab)
cisoseries.com · Web page · Published 8 Jan
Cyber Security News: Cyber Trust label, UK deepfake laws, Treasury attack details
In 2023, the White House launched an initiative to add Cyber Trust labels to retail packaging for connected devices. This was compared to the equivalent of Energy Star certification to indicate a consumer baseline of cybersecurity best practices. The FCC…
Original (new tab)
Group-IB · Web page · Added 1 May
French-speaking gang OPERA1ER APT in Africa
In 2019, Group-IB Threat Intelligence team detected a series of targeted attacks on financial organizations in Africa. Later in 2020, our professionals in collaboration with Orange, managed to piece together the seemingly disparate attacks into a single…
State-sponsored Original (new tab)
Mandiant (Google) · Web page · Published 23 Apr
How UNC6692 Employed Social Engineering to Deploy a Custom Malware Suite
Google Threat Intelligence Group (GTIG) identified a multistage intrusion campaign by a newly tracked threat group, UNC6692, that leveraged persistent social engineering, a custom modular malware suite, and deft pivoting inside the victim’s environment to…
State-sponsored Malware Original (new tab)

Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.