Research reports

Vendor, government and researcher reports that CyberSIXT links from its coverage, with their publishers and topics.

1,281 reports398 publishers97 added in the past week

761–780 of 1,281 reports · page 39 of 65

Added Sat 18 Apr

Check Point · Web page · Published 22 Jun
Beyond the Horizon: Traveling the World on Camaro Dragon’s USB Flash Drives
In early 2023, the Check Point Incident Response Team (CPIRT) team investigated a malware incident at a European healthcare institution involving a set of tools mentioned in the Avast report in late 2022. The incident was attributed to Camaro Dragon, a…
State-sponsored Malware Original (new tab)

Added Fri 17 Apr

Check Point · Web page · Published 5 Sep
UPSynergy: Chinese-American Spy vs. Spy Story
Earlier this year, our colleagues at Symantec uncovered an interesting story about the use of Equation group exploitation tools by an alleged Chinese group named Buckeye (a.k.a APT3, or UPS team). One of the key findings in their publication was that variants…
State-sponsored Vulnerabilities Original (new tab)
Check Point · Web page · Published 7 Jul
Exposing Scattered Spider: New Indicators Highlight Growing Threat to Enterprises and Aviation
Check Point Research identifies phishing domain patterns, offering actionable insights to proactively counter threats from the notorious cyber group behind recent airline attacks Scattered Spider, a sophisticated cyber threat group known for aggressive social…
Phishing Original (new tab)
Trend Micro · Web page · Published 13 Jan
Key Insights on SHADOW-AETHER-015 and Earth Preta from the 2025 MITRE ATT&CK Evaluation with TrendAI Vision One™
Scenario 1 (Demeter), an emulation inspired by SHADOW-AETHER-015 shows the complexity of modern cloud attacks, where adversaries can pivot from compromised endpoints to cloud infrastructure, leveraging stolen credentials and tokens to establish persistence,…
Original (new tab)
cyberdaily.au · Web page · Published 15 Apr
Exclusive: Krybit hackers claim breach of New Zealand IT services provider
Ransomware new kids on the block, Krybit, has listed Auckland-based Dencom New Zealand as a hacking victim. A newcomer to the ransomware scene has listed Kiwi company Dencom New Zealand as a victim on its darknet leak site, one of 16 victims the group has…
Ransomware Original (new tab)
redpacketsecurity.com · Web page · Published 14 Apr
[KRYBIT] - Ransomware Victim: Hacked 0APT
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating to the content should be directed at the attackers, not RedPacket Security. This blog is an…
Ransomware Original (new tab)
confiant.com · Web page · Published 1 Dec
CashRewindo Investment Scam, Ad Security Threat Unveiled
CashRewindo (monikered by Confiant’s security team) uses the programmatic process to place their investment scam ads into digital advertising networks alongside legitimate advertisers. They manipulate domain trust to fool ordinary protection solutions,…
Original (new tab)
Recorded Future · Web page · Added 17 Apr
GrayCharlie Hijacks Law Firm Sites in Suspected Supply-Chain Attack
Insikt Group has been monitoring GrayCharlie, a threat actor overlapping with SmartApeSG and active since mid-2023, for some time, and is now publishing its first report on the group. GrayCharlie compromises WordPress sites and injects them with links to…
Malware Supply chain Original (new tab)
redpacketsecurity.com · Web page · Published 7 Apr
[KRYBIT] - Ransomware Victim: fraper[.]com
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating to the content should be directed at the attackers, not RedPacket Security. This blog is an…
Ransomware Original (new tab)
dataminr.com · Web page · Added 17 Apr
Cyber Intel Brief: Pro-Iran Actor Claims Cyberattack on LA Metro
OT System Access Claimed: Screenshots published by the group appear to show access to a real-time rail yard management and train control display system (Division 11), representing a potentially serious operational technology (OT) intrusion with safety…
Original (new tab)
Cisco Talos · Web page · Published 8 Apr
New Lua-based malware “LucidRook” observed in targeted attacks against Taiwanese organizations
Cisco Talos uncovered a cluster of activity we track as UAT-10362 conducting spear-phishing campaigns against Taiwanese non-governmental organizations (NGOs) and suspected universities to deliver a newly identified malware family, “LucidRook.” LucidRook is a…
Malware Original (new tab)
Check Point · Web page · Published 28 Nov
28th November– Threat Intelligence Report
For the latest discoveries in cyber research for the week of 28th November, please download our Threat Intelligence Bulletin. Top Attacks and Breaches The European Parliament website has been attacked following a vote declaring Russia a state sponsor of…
State-sponsored Botnets and DDoS Original (new tab)
Bitdefender · Web page · Published 9 Feb
No Encryptors, No Problem: The Coinbase Cartel Ransomware Group
The ransomware threat actor Coinbase Cartel first emerged in September 2025 and claimed 14 victims that month. The group focuses on data exfiltration, which aligns with a trend Bitdefender is tracking in the ongoing evolution of ransomware. Currently, the…
Ransomware Original (new tab)

Added Thu 16 Apr

Check Point · Web page · Published 5 Aug
Ramnit’s Network of Proxy Servers
As you may know, Ramnit is one of the most prominent banking malware families in existence today and lately Check Point Research monitored a new massive campaign of Ramnit, dubbed ‘Black’, reaching over 100,000 infections over the course of two months. It is…
Original (new tab)
Check Point · Web page · Published 24 May
Agrius Deploys Moneybird in Targeted Attacks Against Israeli Organizations
Iranian threat actor Agrius continues to operate against Israeli targets, masking destructive influence operations as ransomware attacks. In recent attacks the group deployed Moneybird, a previously unseen ransomware written in C++. Despite presenting…
Ransomware Original (new tab)
Check Point · Web page · Published 6 Sep
DangerousSavanna: Two-year long campaign targets financial institutions in French-speaking Africa
Recent studies show that more than 85% of financial institutions in Central and Western Africa have repeatedly been victimized in multiple, damaging cyberattacks. In a quarter of these cases, intrusions into network systems resulted in the worst possible…
Original (new tab)
Check Point · Web page · Published 4 Feb
SpeakUp: A New Undetected Backdoor Linux Trojan
Check Point Research has discovered a new campaign exploiting Linux servers to implant a new Backdoor Trojan. Dubbed ‘SpeakUp’, the new Trojan exploits known vulnerabilities in six different Linux distributions. The attack targets worldwide servers including…
Malware Vulnerabilities Original (new tab)

Added Wed 15 Apr

Check Point · Web page · Published 15 Jul
New BugSleep Backdoor Deployed in Recent MuddyWater Campaigns
MuddyWater, an Iranian threat group affiliated with the Ministry of Intelligence and Security (MOIS), has significantly increased its activities in Israel since the beginning of the Israel-Hamas war in October 2023. This parallels with activities against…
State-sponsored Malware Phishing Original (new tab)
Cybernews · Web page · Published 30 Sep
BlackCat said they breached US Department of Defense contractor and went offline
The ransomware gang first said they would leak NJVCs data every 12 hours but later dropped the victim from its list. Ransomware gang BlackCat, also known as ALPHV, added NJVC, an IT company supporting the federal government and the US Department of Defense,…
Ransomware Original (new tab)
Cybernews · Web page · Published 12 Jul
Cl0p hacker operating from Russia-Ukraine war front line – exclusive
As the Cl0p ransomware gang continues to sow anxiety worldwide, affecting prominent companies like the BBC and Deutsche Bank, at least one of the gang’s masterminds, Cybernews discovered, is still residing in Ukraine. Deutsche Bank, one of the world’s largest…
Ransomware Vulnerabilities Original (new tab)

Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.