Skip to content

Research reports

Vendor, government and researcher reports that CyberSIXT links from its coverage, with their publishers and topics.

1,233 reports388 publishers50 added in the past week

701–720 of 1,024 reports · page 36 of 52 · Clear filters

Added Mon 20 Apr

Check Point · Web page · Published 22 Sep
Rancor: The Year of The Phish
Earlier this year, Check Point researchers identified a targeted and extensive attack against Southeast Asian government entities over the span of 7 months. The attackers, which we believe are members of the Rancor threat group, used classic spear-phishing to…
Phishing Original (new tab)
Check Point · Web page · Published 21 Dec
Sunburst Hack: Best Practices, Identifying And Mitigating
During the closing weeks of 2020 a Cyber Security attack became one of the main headline news stories of what had already been a news-rich year. Attributed to a campaign that began months earlier, the information security teams of government agencies and…
Original (new tab)
Check Point · Web page · Published 12 Aug
Man-in-the-Disk: Android Apps Exposed via External Storage
Recently, our researchers came across a shortcoming in the design of Android’s use of storage resources. Careless use of External Storage by applications may open the door to an attack resulting in any number of undesired outcomes, such as silent installation…
Mobile Original (new tab)
Check Point · Web page · Published 1 Jul
IndigoZebra APT continues to attack Central Asia with evolving tools
Check Point research recently discovered an ongoing spear-phishing campaign targeting the Afghan government. Further investigation revealed this campaign was a part of a long-running activity targeting other Central-Asia countries, including Kyrgyzstan and…
State-sponsored Original (new tab)

Added Sun 19 Apr

Check Point · Web page · Published 23 Jan
A Whale of a Tale: HummingBad Returns
Check Point researchers have found a new variant of the HummingBad malware hidden in more than 20 apps on Google Play. The infected apps in this campaign were downloaded several million times by unsuspecting users. Check Point informed the Google Security…
Malware Original (new tab)
Check Point · Web page · Published 16 May
CRYING IS FUTILE: SandBlast Forensic Analysis of WannaCry
Using the NSA exploit EternalBlue released by the Shadow Brokers, the WannaCry ransomware developers have added their names to malware lore. Given the number of institutions hit and the amount of media generated, it seemed appropriate to show what the…
Ransomware Original (new tab)
Check Point · Web page · Published 3 Jul
Chinese Threat Actors Targeting Europe in SmugX Campaign
In the last couple of months, Check Point Research (CPR) has been tracking the activity of a Chinese threat actor targeting Foreign Affairs ministries and embassies in Europe. Combined with other Chinese activity previously reported by Check Point Research,…
Original (new tab)
Radware · Web page · Added 19 Apr
OpIsrael: A Decade in Review
OpIsrael is an Anonymous operation that was launched in November 2012 in response to an Israeli military operation, Pillar of Defense. Download a Copy Now Anonymous and several cornerstone operations like OpIsrael have faced a significant decline in support…
Original (new tab)

Added Sat 18 Apr

Check Point · Web page · Published 16 Feb
A Modern Ninja: Evasive Trickbot Attacks Customers of 60 High-Profile Companies
This research comes as a follow-up to our previous article on Trickbot, “When Old Friends Meet Again: Why Emotet Chose Trickbot For Rebirth” where we provided an overview of the Trickbot infrastructure after its takedown. Check Point Research (CPR) now sheds…
Original (new tab)
Check Point · Web page · Published 31 Jul
Osiris: An Enhanced Banking Trojan
Following our recent analysis of the Kronos banking Trojan, we discovered that Kronos has also now been enhanced to hide its communication with C&C server using Tor. While the author of Kronos continues to remain an issue of controversy, the new banking…
Malware Vulnerabilities Original (new tab)
mrd0x.com · Web page · Added 18 Apr
Security Research
This article explores a phishing technique that simulates a browser window within the browser to spoof a legitimate domain. Introduction For security professionals, the URL is usually the most trusted aspect of a domain. Yes there’s attacks like IDN Homograph…
Original (new tab)
Check Point · Web page · Published 19 Feb
North Korea Turns Against New Targets?!
Over the past few weeks, we have been monitoring suspicious activity directed against Russian-based companies that exposed a predator-prey relationship that we had not seen before. For the first time we were observing what seemed to be a coordinated North…
State-sponsored Original (new tab)
Check Point · Web page · Published 22 Jun
Beyond the Horizon: Traveling the World on Camaro Dragon’s USB Flash Drives
In early 2023, the Check Point Incident Response Team (CPIRT) team investigated a malware incident at a European healthcare institution involving a set of tools mentioned in the Avast report in late 2022. The incident was attributed to Camaro Dragon, a…
State-sponsored Malware Original (new tab)

Added Fri 17 Apr

Check Point · Web page · Published 5 Sep
UPSynergy: Chinese-American Spy vs. Spy Story
Earlier this year, our colleagues at Symantec uncovered an interesting story about the use of Equation group exploitation tools by an alleged Chinese group named Buckeye (a.k.a APT3, or UPS team). One of the key findings in their publication was that variants…
State-sponsored Vulnerabilities Original (new tab)
Check Point · Web page · Published 7 Jul
Exposing Scattered Spider: New Indicators Highlight Growing Threat to Enterprises and Aviation
Check Point Research identifies phishing domain patterns, offering actionable insights to proactively counter threats from the notorious cyber group behind recent airline attacks Scattered Spider, a sophisticated cyber threat group known for aggressive social…
Phishing Original (new tab)
Trend Micro · Web page · Published 13 Jan
Key Insights on SHADOW-AETHER-015 and Earth Preta from the 2025 MITRE ATT&CK Evaluation with TrendAI Vision One™
Scenario 1 (Demeter), an emulation inspired by SHADOW-AETHER-015 shows the complexity of modern cloud attacks, where adversaries can pivot from compromised endpoints to cloud infrastructure, leveraging stolen credentials and tokens to establish persistence,…
Original (new tab)
cyberdaily.au · Web page · Published 15 Apr
Exclusive: Krybit hackers claim breach of New Zealand IT services provider
Ransomware new kids on the block, Krybit, has listed Auckland-based Dencom New Zealand as a hacking victim. A newcomer to the ransomware scene has listed Kiwi company Dencom New Zealand as a victim on its darknet leak site, one of 16 victims the group has…
Ransomware Original (new tab)
redpacketsecurity.com · Web page · Published 14 Apr
[KRYBIT] - Ransomware Victim: Hacked 0APT
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating to the content should be directed at the attackers, not RedPacket Security. This blog is an…
Ransomware Original (new tab)
confiant.com · Web page · Published 1 Dec
CashRewindo Investment Scam, Ad Security Threat Unveiled
CashRewindo (monikered by Confiant’s security team) uses the programmatic process to place their investment scam ads into digital advertising networks alongside legitimate advertisers. They manipulate domain trust to fool ordinary protection solutions,…
Original (new tab)
Recorded Future · Web page · Added 17 Apr
GrayCharlie Hijacks Law Firm Sites in Suspected Supply-Chain Attack
Insikt Group has been monitoring GrayCharlie, a threat actor overlapping with SmartApeSG and active since mid-2023, for some time, and is now publishing its first report on the group. GrayCharlie compromises WordPress sites and injects them with links to…
Malware Supply chain Original (new tab)

Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.