Skip to content

Research reports

Vendor, government and researcher reports that CyberSIXT links from its coverage, with their publishers and topics.

1,233 reports388 publishers50 added in the past week

861–880 of 1,024 reports · page 44 of 52 · Clear filters

Added Tue 7 Apr

US Department of Justice · Web page · Published 26 Jun
Russian National Pleads Guilty for Role in Transnational Cybercrime Organization Responsible for more than $568 Million in Losses
One of the leaders of the Infraud Organization pleaded guilty today to RICO conspiracy. Infraud was an Internet-based cybercriminal enterprise engaged in the large-scale acquisition, sale, and dissemination of stolen identities, compromised debit and credit…
Original (new tab)
cnbc.com · Web page · Published 6 Aug
Russia hacks Pentagon computers: NBC, citing sources
U.S. officials tell NBC News that Russia launched a “sophisticated cyberattack” against the Pentagon’s Joint Staff unclassified email system, which has been shut down and taken offline for nearly two weeks. According to the officials, the “sophisticated cyber…
Original (new tab)
US Department of Justice · Web page · Published 17 Feb
3 North Korean Military Hackers Indicted in Wide-Ranging Scheme to Commit Cyber-attacks and Financial Crimes Across the Globe
LOS ANGELES – A federal indictment unsealed today charges three North Korean computer programmers with participating in a wide-ranging criminal conspiracy to conduct a series of destructive cyber-attacks, to steal and extort more than $1.3 billion of money…
Takedowns and arrests Original (new tab)
US Department of Justice · Web page · Published 16 Jun
Russian Botnet Disrupted in International Cyber Operation
SAN DIEGO – The U.S. Department of Justice, together with law enforcement partners in Germany, the Netherlands and the United Kingdom, have dismantled the infrastructure of a Russian botnet known as RSOCKS which hacked millions of computers and other…
Botnets and DDoS Takedowns and arrests Original (new tab)
codeproject.com · Web page · Added 7 Apr
Access Denied
You don't have permission to access "http://www.dot-software.org/articles/coding-education-platforms-for-beginners.html?" on this server. Reference #18.696ef50.1775527577.1ad84eb Source:…
Original (new tab)
US Department of Justice · Web page · Published 17 May
Two Members of Syrian Electronic Army Indicted for Conspiracy
ALEXANDRIA, Va. – A federal grand jury returned an 11-count indictment today charging two Syrian men with offenses relating to their participation in a conspiracy to engage in computer hacking as members of the “Syrian Electronic Army” or “SEA.” Ahmad ‘Umar…
Takedowns and arrests Original (new tab)
US Department of Justice · Web page · Published 28 Oct
U.S. Joins International Action Against RedLine and META Infostealers
AUSTIN, Texas – The Department of Justice joined the Netherlands, Belgium, Eurojust and other partners in announcing an international disruption effort against the current version of RedLine Infostealer, one of the most prevalent infostealers in the world…
Infostealers Takedowns and arrests Original (new tab)
Medium · Web page · Published 3 Dec
Investigating the use of VHD files by cybercriminals
In recent investigations, I observed an adversary making use of a VHD attachment to a spear-phishing email being sent. VHD files are ‘Virtual Hard-Disk’ files. Originally the file format was introduced with Connectix Virtual PC and it can store the contents…
Original (new tab)

Added Mon 6 Apr

Palo Alto Networks · Web page · Added 6 Apr
Palo Alto Networks - Sign In
COMPANY About Palo Alto Networks Careers LEGAL NOTICES Privacy Terms of Use RESOURCES Support Live Community Email Subscription Beacon By signing in, you agree to our Terms and acknowledge our Privacy Statement. COMPANY LEGAL NOTICES RESOURCES About Palo Alto…
Original (new tab)
rsa.com · Web page · Added 6 Apr
pandemiya-emerges-new-malware-alternative-zeus-based
Malware Original (new tab)
MITRE ATT&CK · Web page · Added 6 Apr
Cross-Platform Detection of Data Transfer to Cloud Account, Detection Strategy DET0573
Detects snapshot sharing, backup exports, or data object transfers from victim-owned cloud accounts to other cloud identities within the same provider (e.g., AWS, Azure) using snapshot sharing, S3 bucket policy updates, or SAS URI generation. Log Sources Data…
Original (new tab)
MITRE ATT&CK · Web page · Added 6 Apr
Encrypted Channel, Technique T1573 - Enterprise
APT29 has used multiple layers of encryption within malware to protect C2 communication.[1] G1002 BITTER BITTER has encrypted their C2 communications.[2] S0631 Chaes Chaes has used encryption for its C2 channel.[3] S0498 Cryptoistic Cryptoistic can engage in…
State-sponsored Malware Botnets and DDoS Original (new tab)
MITRE ATT&CK · Web page · Added 6 Apr
Boot or Logon Autostart Execution: Time Providers, Sub-technique T1547.003 - Enterprise
Adversaries may abuse time providers to execute DLLs when the system boots. The Windows Time service (W32Time) enables time synchronization across and within domains.[1] W32Time time providers are responsible for retrieving time stamps from hardware/network…
Original (new tab)
offsec.almond.consulting · Web page · Added 6 Apr
UAC bypass via elevated .NET applications
TL;DR .NET Framework can be made to load a profiling DLL or a COM component DLL via user-defined environment variables and CLSID registry entries, even when the process is elevated. This behavior can be exploited to bypass UAC in default settings on Windows 7…
Original (new tab)
MITRE ATT&CK · Web page · Added 6 Apr
Boot or Logon Autostart Execution: LSASS Driver, Sub-technique T1547.008 - Enterprise
Adversaries may modify or add LSASS drivers to obtain persistence on compromised systems. The Windows security subsystem is a set of components that manage and enforce the security policy for a computer or domain. The Local Security Authority (LSA) is the…
Original (new tab)
dl.acm.org · Web page · Added 6 Apr
Rage against the virtual machine
Several features on this page require Premium Access. Information & Contributors Bibliometrics & Citations Reading Options References Figures Tables Media Share Abstract Antivirus companies, mobile application marketplaces, and the security research…
Malware Mobile Original (new tab)
MITRE ATT&CK · Web page · Added 6 Apr
Encrypted Channel, Technique T1573 - Enterprise
APT29 has used multiple layers of encryption within malware to protect C2 communication.[1] G1002 BITTER BITTER has encrypted their C2 communications.[2] S0631 Chaes Chaes has used encryption for its C2 channel.[3] S0498 Cryptoistic Cryptoistic can engage in…
State-sponsored Malware Botnets and DDoS Original (new tab)
MITRE ATT&CK · Web page · Added 6 Apr
Patchwork, Hangover Group, Dropping Elephant, Chinastrats, MONSOON, Operation Hangover, Group G0040
Enterprise T1548 .002 Abuse Elevation Control Mechanism: Bypass User Account Control Patchwork bypassed User Access Control (UAC).[1] Enterprise T1560 Archive Collected Data Patchwork encrypted the collected files' path with AES and then encoded them with…
Original (new tab)
MITRE ATT&CK · Web page · Added 6 Apr
Behavioral Detection of User Discovery via Local and Remote Enumeration, Detection Strategy DET0093
Adversary launches built-in system tools (e.g., whoami, query user, net user) or scripts that enumerate user account information via local execution or remote API queries (e.g., WMI, PowerShell). Log Sources Data Component Name Channel Process Creation…
Original (new tab)
MITRE ATT&CK · Web page · Added 6 Apr
Server Software Component: Web Shell, Sub-technique T1505.003 - Enterprise
During the 2022 Ukraine Electric Power Attack, Sandworm Team deployed the Neo-REGEORG webshell on an internet-facing server. [3] G1030 Agrius Agrius typically deploys a variant of the ASPXSpy web shell following initial access via exploitation.[4] G0007 APT28…
State-sponsored Vulnerabilities Original (new tab)

Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.