Research reports
TopicAll topics
PublisherAll publishers
- All publishers1,281
- Check Point99
- DataBreaches.net51
- GitHub50
- MITRE ATT&CK44
- Mandiant (Google)33
- Microsoft31
- Group-IB29
- Recorded Future22
- Unit 4221
- ETDA Threat Group Cards20
- Medium20
- Trend Micro20
- CISA18
- ESET17
- Malpedia15
- Team Cymru15
- ANSSI (CERT-FR)13
- Intezer13
- US Department of Justice13
- Cisco Talos12
- FBI IC312
- Virus Bulletin11
- PhishLabs10
- The Hacker News10
- The Record10
- Elastic Security Labs9
- Intrinsec9
- SecurityScorecard9
- Cybernews8
- Kaspersky8
SortNewest added
741–760 of 1,281 reports · page 38 of 65
Added Thu 23 Apr
Check Point · Web page · Published 25 Jun
In the Wild: Malware Prototype with Embedded Prompt Injection
In this write-up we present a malware sample found in the wild that boasts a novel and unusual evasion mechanism — an attempted prompt injection (”Ignore all previous instructions…”) aimed to manipulate AI models processing the sample. The sample gives the…
Radware · Web page · Added 23 Apr
AI Crawler Traffic Is Exploding: What Website Owners Must Do Now
Radware icon WHY RADWARE? Learn how Radware EPIC-AI™ rapidly resolves issues Menu Customers CUSTOMERS Read case studies, reviews and customer testimonials Menu Diversity & Inclusion DIVERSITY & INCLUSION Get to know Radware’s fair and supportive culture Menu…
Added Wed 22 Apr
Check Point · Web page · Published 19 May
Twisted Panda: Chinese APT espionage operation against Russian state-owned defense institutes
In the past two months, we observed multiple APT groups attempting to leverage the Russia and Ukraine war as a lure for espionage operations. It comes as no surprise that Russian entities themselves became an attractive target for spear-phishing campaigns…
Check Point · Web page · Published 12 Mar
Vicious Panda: The COVID Campaign
Check Point Research discovered a new campaign against the Mongolian public sector, which takes advantage of the current Coronavirus scare, in order to deliver a previously unknown malware implant to the target. A closer look at this campaign allowed us to…
Check Point · Web page · Published 7 May
Naikon APT: Cyber Espionage Reloaded
Recently Check Point Research discovered new evidence of an ongoing cyber espionage operation against several national government entities in the Asia Pacific (APAC) region. This operation, which we were able to attribute to the Naikon APT group, used a new…
Added Tue 21 Apr
Check Point · Web page · Published 10 Mar
The Growing Danger of Blind Eagle: One of Latin America’s Most Dangerous Cyber Criminal Groups Targe ...
Check Point Research (CPR) has uncovered a series of ongoing, targeted cyber campaigns by Blind Eagle (APT-C-36)—one of Latin America’s most dangerous threat actors Days after Microsoft released a fix for CVE-2024-43451, the group began employing a comparable…
Check Point · Web page · Published 13 Jul
OSX/Dok Refuses to Go Away and It’s After Your Money
Following up on our recent discovery of the new OSX/Dok malware targeting macOS users, we’d like to report that the malicious actors behind it are not giving up yet. They are aiming at the victim’s banking credentials by mimicking major bank sites. The fake…
Check Point · Web page · Published 16 May
VSCode Security: Malicious Extensions Detected- More Than 45,000 Downloads- PII Exposed, and Backdoors Enabled
VSCode (short for Visual Studio Code) is a popular and free source code editor developed by Microsoft. It’s an efficient and customizable coding environment that can support a wide range of programming languages, frameworks, and tools. VSCode has gained muc
Added Mon 20 Apr
Check Point · Web page · Published 22 Sep
Rancor: The Year of The Phish
Earlier this year, Check Point researchers identified a targeted and extensive attack against Southeast Asian government entities over the span of 7 months. The attackers, which we believe are members of the Rancor threat group, used classic spear-phishing to…
Check Point · Web page · Published 21 Dec
Sunburst Hack: Best Practices, Identifying And Mitigating
During the closing weeks of 2020 a Cyber Security attack became one of the main headline news stories of what had already been a news-rich year. Attributed to a campaign that began months earlier, the information security teams of government agencies and…
Check Point · Web page · Published 12 Aug
Man-in-the-Disk: Android Apps Exposed via External Storage
Recently, our researchers came across a shortcoming in the design of Android’s use of storage resources. Careless use of External Storage by applications may open the door to an attack resulting in any number of undesired outcomes, such as silent installation…
Check Point · Web page · Published 1 Jul
IndigoZebra APT continues to attack Central Asia with evolving tools
Check Point research recently discovered an ongoing spear-phishing campaign targeting the Afghan government. Further investigation revealed this campaign was a part of a long-running activity targeting other Central-Asia countries, including Kyrgyzstan and…
Added Sun 19 Apr
Check Point · Web page · Published 23 Jan
A Whale of a Tale: HummingBad Returns
Check Point researchers have found a new variant of the HummingBad malware hidden in more than 20 apps on Google Play. The infected apps in this campaign were downloaded several million times by unsuspecting users. Check Point informed the Google Security…
Check Point · Web page · Published 16 May
CRYING IS FUTILE: SandBlast Forensic Analysis of WannaCry
Using the NSA exploit EternalBlue released by the Shadow Brokers, the WannaCry ransomware developers have added their names to malware lore. Given the number of institutions hit and the amount of media generated, it seemed appropriate to show what the…
Check Point · Web page · Published 3 Jul
Chinese Threat Actors Targeting Europe in SmugX Campaign
In the last couple of months, Check Point Research (CPR) has been tracking the activity of a Chinese threat actor targeting Foreign Affairs ministries and embassies in Europe. Combined with other Chinese activity previously reported by Check Point Research,…
Radware · Web page · Added 19 Apr
OpIsrael: A Decade in Review
OpIsrael is an Anonymous operation that was launched in November 2012 in response to an Israeli military operation, Pillar of Defense. Download a Copy Now Anonymous and several cornerstone operations like OpIsrael have faced a significant decline in support…
Added Sat 18 Apr
Check Point · Web page · Published 16 Feb
A Modern Ninja: Evasive Trickbot Attacks Customers of 60 High-Profile Companies
This research comes as a follow-up to our previous article on Trickbot, “When Old Friends Meet Again: Why Emotet Chose Trickbot For Rebirth” where we provided an overview of the Trickbot infrastructure after its takedown. Check Point Research (CPR) now sheds…
Check Point · Web page · Published 31 Jul
Osiris: An Enhanced Banking Trojan
Following our recent analysis of the Kronos banking Trojan, we discovered that Kronos has also now been enhanced to hide its communication with C&C server using Tor. While the author of Kronos continues to remain an issue of controversy, the new banking…
mrd0x.com · Web page · Added 18 Apr
Security Research
This article explores a phishing technique that simulates a browser window within the browser to spoof a legitimate domain. Introduction For security professionals, the URL is usually the most trusted aspect of a domain. Yes there’s attacks like IDN Homograph…
Check Point · Web page · Published 19 Feb
North Korea Turns Against New Targets?!
Over the past few weeks, we have been monitoring suspicious activity directed against Russian-based companies that exposed a predator-prey relationship that we had not seen before. For the first time we were observing what seemed to be a coordinated North…
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.