Research reports

Vendor, government and researcher reports that CyberSIXT links from its coverage, with their publishers and topics.

1,281 reports398 publishers97 added in the past week

601–620 of 1,281 reports · page 31 of 65

Added Tue 5 May

Group-IB · Web page · Added 5 May
Group-IB uncovers Android Trojan named «Gustuff» capable of targeting more than 100 global banking apps, cryptocurrency and marketplace applications
Group-IB, an international company that specializes in preventing cyberattacks, has detected activity of Gustuff a mobile Android Trojan, which includes potential targets of customers in leading international banks, users of cryptocurrency services, popular…
Malware Mobile Original (new tab)
ThreatFabric · Web page · Published 1 Oct
BianLian - from rags to riches, the malware dropper that had a dream
Recently, while analyzing our daily portion of APK files, searching for the new banking related threats, we found a sample that was standing out among the others. While being seemingly benign, the sample was downloading and installing the infamous Anubis…
Malware Mobile Original (new tab)
Check Point · Web page · Published 20 Sep
Behind the Scenes of BBTok: Analyzing a Banker’s Server Side Components
Check Point Research recently discovered an active campaign operating and deploying a new variant of the BBTok banker in Latin America. In the research, we highlight newly discovered infection chains that use a unique combination of Living off the Land…
Original (new tab)
Medium · Web page · Published 2 Dec
Approaching stealers devs : a brief interview with Amadey
To completely understand what’s going on in a market that has been growing in the last years I found mandatory to know which players are dominating it. Always remember that behind every user of the Internet there is another human like you, so if you can be…
Infostealers Original (new tab)
Group-IB · Web page · Added 5 May
ATT&CKing ProLock Ransomware
The success of enterprise ransomware attacks has motivated more and more threat actors to join the game. One of these new players is ProLock ransomware. The locker emerged in March 2020 as the successor of PwndLocker, which began operating in late 2019 and…
Ransomware Original (new tab)
Group-IB · Web page · Added 5 May
Inside the Hive
In the first 11 months of 2021, over 60% of all incidents investigated by Group-IB involved ransomware. Ransomware has finally established itself as cyber threat number one. In July 2021, international media reported that REvil ransomware operators demanded a…
Ransomware Original (new tab)
Medium · Web page · Published 13 Jul
Matryoshka : Variant of ROKRAT, APT37 (Scarcruft)
- Scarcruft(a.k.a APT37, Group123)는 북한 배후로 알려진 위협그룹으로 2012년부터 현재까지 지속 적인 공격 활동이 포착되고 있음 Overview Press enter or click to view image in full size
State-sponsored Original (new tab)
systemweakness.com · Web page · Published 20 Dec
A “??????t??????a????????????e ??????o????????????” Smishing Campaign that changes behaviour based on User-Agent, and abuses…
A “𝙨t𝙧a𝗇𝗀e 𝙛o𝙣𝗍” Smishing Campaign that changes behaviour based on User-Agent, and abuses… By Lena 8 min read Jan 23, 2023 Recently in Japan, there has been an increase in Smishing attacks that uses a strange font. This got me wondering what was behind…
Phishing Original (new tab)
wiwo.de · Web page · Published 10 May
Emotet: Wie das riesige Hacker-Netzwerk lahmgelegt wurde
4. Emotet-Netzwerk: Der Coup, der eines der gefährlichsten Hacker-Netze der Welt lahmlegte Der schwere Schlag der Ermittler gegen eine der gefährlichsten Cybercrime-Plattformen weltweit lähmte die Hacker über Monate. Nun werden die Hacker wieder aktiv.…
Original (new tab)
cylance.com · Web page · Added 5 May
Ending Cyber Risk with Aurora Endpoint Security - Arctic Wolf
Arctic Wolf®, the leader in security operations, has acquired Cylance, a pioneer of AI-based endpoint security. With this acquisition, Arctic Wolf ushers in a new era of simplicity and efficacy to the endpoint security market that will deliver the security…
Original (new tab)
Group-IB · Web page · Added 5 May
Cybercriminal greeners from Iran attack companies worldwide for financial gain
Group-IB, a global threat hunting and intelligence company headquartered in Singapore, has detected financially motivated attacks carried out by Iranian newbie threat actors in June. The attackers used Dharma ransomware and a mix of publicly available tools…
Ransomware State-sponsored Original (new tab)
tesorion.nl · Web page · Added 5 May
Tesorion: Your Partner in Comprehensive Cybersecurity Solutions
Tesorion is a multidisciplinary cybersecurity company with 100% focus on four key security disciplines: Security Monitoring, Offensive Security, Security Advisory, and Incident Response. Our Managed Detection & Response (MDR) service and Tesorion Security…
Original (new tab)
Group-IB · Web page · Added 5 May
Godfather Trojan - mobile banking malware that is impossible to refuse
The Android banking Trojan Godfather is currently being utilized by cybercriminals to attack users of popular financial services across the globe. Godfather is designed to allow threat actors to harvest login credentials for banking applications and other…
Malware Mobile Original (new tab)
Check Point · Web page · Published 20 May
Bad Karma, No Justice: Void Manticore Destructive Activities in Israel
Void Manticore is an Iranian threat actor affiliated with the Ministry of Intelligence and Security (MOIS). They carry out destructive wiping attacks combined with influence operations. The threat actor operates several online personas, with the most…
Original (new tab)
Medium · Web page · Published 25 May
SocGholish Campaigns and Initial Access Kit
SocGholish AKA FAKEUPDATES was first reported in 2017. While the initial analysis and reporting did not gain much attention, over time the actor(s) behind the activity continued to expand and develop their operations. Partnering with Evil Corp, the FAKEUPDATE…
Original (new tab)

Added Sun 3 May

BleepingComputer · Web page · Published 14 Jun
WestJet investigates cyberattack disrupting internal systems
WestJet, Canada's second-largest airline, is investigating a cyberattack that has disrupted access to some internal systems as it responds to the breach. "WestJet is aware of a cybersecurity incident involving internal systems and the WestJet app, which has…
Original (new tab)
BleepingComputer · Web page · Published 11 Oct
Nemty 1.6 Ransomware Released and Pushed via RIG Exploit Kit
The RIG exploit kit is now pushing a cocktail of malware that includes a new variant of the Nemty Ransomware. First spotted by exploit kit researcher mol69, a malvertising campaign is redirecting users to the RIG exploit kit to target enterprise users who are…
Ransomware Malware Vulnerabilities Original (new tab)
Sysdig · Web page · Added 3 May
REPORT. 2023 Global Cloud Threat Report
WEBINAR. DevOps Security, Monitoring and Compliance with OpenShift and Sysdigvideo Cloud SecurityOpenshiftRed HatSysdig Secure GUIDE. Continuous Security for AWS Cloud and Containerspdf AWSCloud SecuritySysdig SecureCloud Monitoring GUIDE. 5 Steps to Securing…
Original (new tab)
Medium · Web page · Published 21 May
Winnti: More than just Windows and Gates
The Winnti malware family was first reported in 2013 by Kaspersky Lab¹. Since then, threat actors leveraging Winnti malware have victimized a diverse set of targets for varied motivations. While the name ‘Winnti’ in public reporting was previously used to…
Malware Original (new tab)
cobaltstrike.com · Web page · Added 3 May
User-driven Web Drive-by Attacks
Cobalt Strike makes several tools to setup web drive-by attacks available to you. To quickly start an attack, navigate to Attacks and choose one of the following option: Java Signed Applet Attack This attack starts a web server hosting a self-signed Java…
Original (new tab)

Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.