Skip to content

Research reports

Vendor, government and researcher reports that CyberSIXT links from its coverage, with their publishers and topics.

1,233 reports388 publishers50 added in the past week

681–700 of 1,024 reports · page 35 of 52 · Clear filters

Added Thu 23 Apr

DataBreaches.net · Web page · Published 5 May
Negotiations with the Akira ransomware group: an ill-advised approach
@Chum1ng0 took a look at four victims of Akira and what happened in terms of negotiations or not. In translation: After a detailed analysis, we identified four chats from different companies that attempted to communicate with Akira after being attacked. Some…
Ransomware Original (new tab)
spixnet.at · Web page · Added 23 Apr
Spixnet.ai – Next Gen Email Encryption
Founded in 2022 – Built for Modern Email Security. Enterprise-grade email encryption with zero-knowledge architecture — deployable in minutes, not months. Let's chat Learn more 1876 Founded 271+ Happy Customers 92% Uptime SLA Trusted by Industry Leaders…
Original (new tab)
Check Point · Web page · Published 1 Oct
Rhadamanthys 0.9.x – walk through the updates
Rhadamanthys is a popular, multi-modular stealer, released in 2022. Since then, it has been used in multiple campaigns by various actors. Most recently, it is being observed in the ClickFix campaigns. The latest version, 0.9.2, comes with significant updates…
Original (new tab)
Cleafy · Web page · Added 23 Apr
Mirax: a new Android RAT turning infected devices into potential residential proxy nodes
New Maas spreading: Mirax has emerged as a sophisticated Malware-as-a-Service (MaaS) offering, specifically targeting Android devices across Europe. It is actively marketed and distributed through underground malware forums. At the time of writing, Cleafy…
Malware Mobile Original (new tab)
K7 Labs · Web page · Published 23 Jul
Threat actors target recent Election Results
Recently, we saw a tweet about a document claiming to be reporting about the recent “Indian Election Results”. On analysis, we found that it was dropping a “Crimson RAT” payload. This RAT, mostly used by the Transparent Tribe APT, is capable of stealing…
State-sponsored Malware Original (new tab)
Check Point · Web page · Published 22 Sep
7 Years of Scarlet Mimic’s Mobile Surveillance Campaign Targeting Uyghurs
In 2022, Check Point Research (CPR) observed a new wave of a long-standing campaign targeting the Uyghur community, a Turkic ethnic group originating from Central Asia, one of the largest minority ethnic groups in China. This malicious activity, which we…
Malware Mobile Original (new tab)
Check Point · Web page · Published 5 Jan
Can You Trust a File’s Digital Signature? New Zloader Campaign exploits Microsoft’s Signature Verification putting users at risk
Last seen in August 2021, Zloader, a banking malware designed to steal user credentials and private information, is back with a simple yet sophisticated infection chain. Previous Zloader campaigns, which were seen in 2020, used malicious documents, adult…
Vulnerabilities Original (new tab)
Check Point · Web page · Published 29 May
Lumma Infostealer – Down but Not Out?
The takedown achieved a significant disruption to Lumma infostealers’ infrastructure, but likely didn’t permanently affect most of its Russia-hosted infrastructure. Lumma’s developers are undertaking significant efforts to reinstate the activity and to…
Infostealers Takedowns and arrests Original (new tab)
threatmon.io · Web page · Published 18 Oct
The Konni APT Chronicle: Tracing Their Intelligence-Driven Attack Chain
Unified threat visibility and continuous monitoring across every cyber asset. Protect your digital identity, monitor the dark web, and receive instant alerts – all from your phone. Run controlled DDoS simulations to evaluate infrastructure resilience and…
State-sponsored Original (new tab)
DataBreaches.net · Web page · Published 26 May
A former DarkSide listing shows up on REvil's leak site
On May 15, Chum1ng0 reported that German furniture retailer Möbelstadt Sommerlad had been hit by DarkSide threat actors. By then DarkSide’s leak site was down and it had not been possible to confirm whether DarkSide had ever listed the retailer as a victim or…
Original (new tab)
spixnet.com · Web page · Added 23 Apr
Spixnet.ai – Next Gen Email Encryption
Founded in 2022 – Built for Modern Email Security. Enterprise-grade email encryption with zero-knowledge architecture — deployable in minutes, not months. Let's chat Learn more 1811 Founded 262+ Happy Customers 89% Uptime SLA Trusted by Industry Leaders…
Original (new tab)
Check Point · Web page · Published 31 Aug
From Hidden Bee to Rhadamanthys – The Evolution of Custom Executable Formats
Rhadamanthys stealer’s design and implementation significantly overlap with those of Hidden Bee coin miner. The similarity is apparent at many levels: custom executable formats, the use of similar virtual filesystems, identical paths to some of the…
Original (new tab)
Check Point · Web page · Published 25 Jun
In the Wild: Malware Prototype with Embedded Prompt Injection
In this write-up we present a malware sample found in the wild that boasts a novel and unusual evasion mechanism — an attempted prompt injection (”Ignore all previous instructions…”) aimed to manipulate AI models processing the sample. The sample gives the…
Malware AI Original (new tab)
Radware · Web page · Added 23 Apr
AI Crawler Traffic Is Exploding: What Website Owners Must Do Now
Radware icon WHY RADWARE? Learn how Radware EPIC-AI™ rapidly resolves issues Menu Customers CUSTOMERS Read case studies, reviews and customer testimonials Menu Diversity & Inclusion DIVERSITY & INCLUSION Get to know Radware’s fair and supportive culture Menu…
Original (new tab)

Added Wed 22 Apr

Check Point · Web page · Published 19 May
Twisted Panda: Chinese APT espionage operation against Russian state-owned defense institutes
In the past two months, we observed multiple APT groups attempting to leverage the Russia and Ukraine war as a lure for espionage operations. It comes as no surprise that Russian entities themselves became an attractive target for spear-phishing campaigns…
State-sponsored Original (new tab)
Check Point · Web page · Published 12 Mar
Vicious Panda: The COVID Campaign
Check Point Research discovered a new campaign against the Mongolian public sector, which takes advantage of the current Coronavirus scare, in order to deliver a previously unknown malware implant to the target. A closer look at this campaign allowed us to…
State-sponsored Malware Original (new tab)
Check Point · Web page · Published 7 May
Naikon APT: Cyber Espionage Reloaded
Recently Check Point Research discovered new evidence of an ongoing cyber espionage operation against several national government entities in the Asia Pacific (APAC) region. This operation, which we were able to attribute to the Naikon APT group, used a new…
State-sponsored Original (new tab)

Added Tue 21 Apr

Check Point · Web page · Published 10 Mar
The Growing Danger of Blind Eagle: One of Latin America’s Most Dangerous Cyber Criminal Groups Targe ...
Check Point Research (CPR) has uncovered a series of ongoing, targeted cyber campaigns by Blind Eagle (APT-C-36)—one of Latin America’s most dangerous threat actors Days after Microsoft released a fix for CVE-2024-43451, the group began employing a comparable…
Original (new tab)
Check Point · Web page · Published 13 Jul
OSX/Dok Refuses to Go Away and It’s After Your Money
Following up on our recent discovery of the new OSX/Dok malware targeting macOS users, we’d like to report that the malicious actors behind it are not giving up yet. They are aiming at the victim’s banking credentials by mimicking major bank sites. The fake…
Mobile Original (new tab)
Check Point · Web page · Published 16 May
VSCode Security: Malicious Extensions Detected- More Than 45,000 Downloads- PII Exposed, and Backdoors Enabled
VSCode (short for Visual Studio Code) is a popular and free source code editor developed by Microsoft. It’s an efficient and customizable coding environment that can support a wide range of programming languages, frameworks, and tools. VSCode has gained muc
Malware Original (new tab)

Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.