Skip to content

Research reports

Vendor, government and researcher reports that CyberSIXT links from its coverage, with their publishers and topics.

1,233 reports388 publishers50 added in the past week

741–760 of 1,024 reports · page 38 of 52 · Clear filters

Added Tue 14 Apr

Check Point · Web page · Published 16 May
The Dragon Who Sold His Camaro: Analyzing Custom Router Implant
Research by: Itay Cohen, Radoslaw Madej, and the Threat Intelligence Team Over the past few months, Check Point Research has closely monitored a series of targeted attacks aimed at European foreign affairs entities. These campaigns have been linked to a…
State-sponsored Malware Original (new tab)
Check Point · Web page · Published 30 Oct
Evolving Cyber Dynamics Amidst the Israel-Hamas Conflict
Pro-Palestinian cyber activists have broadened their scope beyond Israel, targeting countries perceived as Israeli allies in the war against Hamas. The cyber operations mainly serve as informational and retaliatory tactics, with limited reported damage.…
Original (new tab)

Added Mon 13 Apr

Check Point · Web page · Published 15 Apr
Unmasking APT29: The Sophisticated Phishing Campaign Targeting European Diplomacy
Check Point Research has been observing a sophisticated phishing campaign conducted by Advanced Persistent Threat (APT) 29, a Russian-linked threat group. The operation targeted diplomatic organizations throughout Europe. The campaign appears to continue a…
State-sponsored Phishing Original (new tab)
Check Point · Web page · Published 6 Jun
Banking Trojans Under Development
Although banks themselves have taken measures to strengthen the security of their authentication processes, Banker Trojans, however, are still a popular tool for stealing user’s financial details and draining bank accounts. The Check Point Research team…
Malware Original (new tab)
Check Point · Web page · Published 30 Nov
More Than 1 Million Google Accounts Breached by Gooligan
As a result of a lot of hard work done by our security research teams, we revealed today a new and alarming malware campaign. The attack campaign, named Gooligan, breached the security of over one million Google accounts. The number continues to rise at an…
Malware Original (new tab)
Check Point · Web page · Published 22 Sep
Iranian Threat Actor Nimbus Manticore Expands Campaigns into Europe with Advanced Malware and Fake Job Lures
Check Point Research is actively tracking Iranian threat actor Nimbus Manticore. Our latest findings show it is expanding operations into Europe and now targeting the defense, telecom, and aerospace sectors. The group uses fake job portals and spear‑phishing…
Malware Original (new tab)
CISA · Web page · Published 24 Feb
Iranian Government-Sponsored Actors Conduct Cyber Operations Against Global Government and Commercial Networks
* Search for indicators of compromise. * Use antivirus software. * Patch all systems. * Prioritize patching known exploited vulnerabilities. * Train users to recognize and report phishing attempts. * Use multi-factor authentication. Note: this advisory uses…
Vulnerabilities Original (new tab)
cfr.org · Web page · Added 13 Apr
Cyber Operations Tracker
A threat actor used malware known as Shamoon 2.0 to exfiltrate and delete data from computers in the Saudi transportation sector. Suspected victims General Authority of Civil Aviation of Saudi Arabia Type of incident Data destruction Target category…
Original (new tab)

Added Sun 12 Apr

specopssoft.com · Web page · Published 28 Jul
“Can you reset my password?” How a simple service desk attack cost Clorox $400 million
“Can you reset my password?” How a simple service desk attack cost Clorox $400 million Clorox breach: Attack summary Clorox hack: How the service desk social engineering played out Specops analysis: What can we learn from the Clorox hack? Hand holding a…
Original (new tab)
Check Point · Web page · Published 8 Dec
Trickbot Rebirths Emotet: 140,000 Victims in 149 Countries in 10 Months
Check Point Research (CPR) warns of potential ransomware attacks, as it sees samples of Emotet fast-spreading via Trickbot. Since Emotet’s takedown by law enforcement, CPR estimates 140,000 victims of Trickbot, across 149 countries in only 10 months. New…
Ransomware Malware Takedowns and arrests Original (new tab)
Check Point · Web page · Published 9 Jul
New Joker variant hits Google Play with an old trick
Check Point’s researchers recently discovered a new variant of the Joker Dropper and Premium Dialer spyware in Google Play. Hiding in seemingly legitimate applications, we found that this updated version of Joker was able to download additional malware to the…
Malware Original (new tab)
Check Point · Web page · Published 12 Nov
Hamas-affiliated Threat Actor WIRTE Continues its Middle East Operations and Moves to Disruptive Activity
Check Point Research has been tracking ongoing activity of WIRTE threat actor, previously associated with the Hamas-affiliated group Gaza Cybergang, despite the ongoing war in the region. The conflict has not disrupted the WIRTE’s activity, and they continue…
State-sponsored Original (new tab)
revealer-keylogger.en.softonic.com · Web page · Published 11 Nov
Revealer Keylogger - Download
Revealer Keylogger is a simple, easy-to-use keylogger that records everything that's typed into the computer. Revealer Keylogger works surprisingly well. Under a rather simple interface we find a tool that can hide itself (so that users don't notice they're…
Original (new tab)
Check Point · Web page · Published 3 Oct
3rd October – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 3rd October, please download our Threat Intelligence Bulletin. Top Attacks and Breaches Check Point Research identified an ongoing, mobile malware campaign that has consistently targeted Uyghurs for…
Malware Mobile Original (new tab)

Added Sat 11 Apr

DataBreaches.net · Web page · Published 26 Nov
Henry Schein re-encrypted by BlackCat again
On Saturday, October 14, Henry Schein, Inc. (Nasdaq: HSIC) determined that a portion of its manufacturing and distribution businesses experienced a cybersecurity incident. Henry Schein promptly took precautionary action, including taking certain systems…
Ransomware Original (new tab)
DataBreaches.net · Web page · Published 12 Apr
A chat with DarkSide
If you would meet us on the street – you would never realize that we are cyberpests, because we are the same normal people like everyone else. Many have families and children, the only thing that these circumstances in which we found themselves in our country…
Original (new tab)
Check Point · Web page · Published 18 Sep
Rampant Kitten – An Iranian Espionage Campaign
Check Point Research unraveled an ongoing surveillance operation by Iranian entities that has been targeting Iranian expats and dissidents for years. While some individual sightings of this attack were previously reported by other researchers and journalists,…
State-sponsored Original (new tab)
DataBreaches.net · Web page · Published 7 Jul
"Almost everything you have posted in your news article about this incident is a total crap" -- BlackCat to Bangladeshi news outlets
On June 23, using the greeting that Hive ransomware always used in emailing victims, AlphV wrote to the Bangladesh Krishi Bank (BKB). Typos, grammar, and spelling as in the original: Hello,Ladies and Gentlemen! This is ALPHV Ransomware Team. We are here to…
Ransomware Original (new tab)
DataBreaches.net · Web page · Published 27 Sep
Desorden Group claims to have stolen 200 GB of data from ABX Express
DataBreaches.net has been contacted by a threat actor or group calling themselves “Desorden Group” (“Desorden”). The group claims to have hacked ABX Express Enterprise servers in Malaysia on September 23. We have stolen more than 200 gigabytes of files and…
Original (new tab)
Check Point · Web page · Published 9 Oct
'Stayin' Alive' Campaign in Asia
Check Point Research has been tracking “Stayin’ Alive”, an ongoing espionage campaign operating in Asia, and primarily targeting the Telecom industry, as well as government organizations. The “Stayin’ Alive” campaign used against high-profile Asian…
Original (new tab)

Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.