Research reports
TopicAll topics
PublisherAll publishers
- All publishers1,281
- Check Point99
- DataBreaches.net51
- GitHub50
- MITRE ATT&CK44
- Mandiant (Google)33
- Microsoft31
- Group-IB29
- Recorded Future22
- Unit 4221
- ETDA Threat Group Cards20
- Medium20
- Trend Micro20
- CISA18
- ESET17
- Malpedia15
- Team Cymru15
- ANSSI (CERT-FR)13
- Intezer13
- US Department of Justice13
- Cisco Talos12
- FBI IC312
- Virus Bulletin11
- PhishLabs10
- The Hacker News10
- The Record10
- Elastic Security Labs9
- Intrinsec9
- SecurityScorecard9
- Cybernews8
- Kaspersky8
SortNewest added
901–920 of 1,281 reports · page 46 of 65
Added Tue 7 Apr
Check Point · Web page · Published 3 Jun
SharpPanda: Chinese APT Group Targets Southeast Asian Government With Previously Unknown Backdoor
Check Point Research identified an ongoing surveillance operation targeting a Southeast Asian government. The attackers use spear-phishing to gain initial access and leverage old Microsoft Office vulnerabilities together with the chain of in-memory loaders to…
Microsoft · Web page · Added 7 Apr
404 ~ Not found
1. MSRC 2. Customer Guidance 3. Security Update Guide 4. Not found The page you were looking for was either not found or not available! Source: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8625 (Feed generated wi
cysecurity.news · Web page · Added 7 Apr
CySecurity News - Latest Information Security and Hacking Incidents: Twisted Spider's Dangerous CACTUS Ransomware Attack
In a sophisticated cyber campaign, the group Twisted Spider, also recognized as Storm-0216, has joined forces with the cybercriminal faction Storm-1044. Employing a strategic method, they target specific endpoints through the deployment of an initial access…
Radware · Web page · Added 7 Apr
Six-day, 14.7 Million RPS Web DDoS Attack Campaign Attributed to SN_BLACKMETA
Key Attack Insights: Web DDoS attack campaign lasted six days and peaked at 14.7 Million RPS Featured multiple attack waves amounting to a total of 100 hours of attack time Sustained an average of 4.5 million RPS Targeted a financial institution in the Middle…
Check Point · Web page · Published 18 Feb
EvilPlayout: Attack Against Iran’s State Broadcaster
In the past few months, a new wave of cyberattacks has been flooding Iran. These attacks are far from minor website defacements – the recent wave is hitting national infrastructure and causing major disruptions to public services. This article provides an…
US Department of Justice · Web page · Published 8 Aug
Department Disrupts North Korean Remote IT Worker Fraud Schemes Through Charges and Arrest of Nashville Facilitator
NASHVILLE – Matthew Isaac Knoot, 38, of Nashville, Tennessee, was charged today for his efforts to generate revenue for the Democratic People’s Republic of Korea’s (DPRK or North Korea) illicit weapons program, which includes weapons of mass destruction…
US Department of Justice · Web page · Published 6 Apr
Justice Department Announces Court-Authorized Disruption of Botnet Controlled by the Russian Federation’s Main Intelligence Directorate (GRU)
Operation Copied and Removed Malware Known as “Cyclops Blink” from the Botnet’s Command-And-Control Devices, Disrupting the GRU’s Control Over Thousands of Infected Devices Worldwide. Victims Must Take Additional Steps to Remediate the Vulnerability and…
Group-IB · Web page · Added 7 Apr
Cybersecurity Services, Solutions & Products. Global Provider
US Department of Justice · Web page · Published 26 Jun
Russian National Pleads Guilty for Role in Transnational Cybercrime Organization Responsible for more than $568 Million in Losses
One of the leaders of the Infraud Organization pleaded guilty today to RICO conspiracy. Infraud was an Internet-based cybercriminal enterprise engaged in the large-scale acquisition, sale, and dissemination of stolen identities, compromised debit and credit…
cnbc.com · Web page · Published 6 Aug
Russia hacks Pentagon computers: NBC, citing sources
U.S. officials tell NBC News that Russia launched a “sophisticated cyberattack” against the Pentagon’s Joint Staff unclassified email system, which has been shut down and taken offline for nearly two weeks. According to the officials, the “sophisticated cyber…
US Department of Justice · Web page · Published 17 Feb
3 North Korean Military Hackers Indicted in Wide-Ranging Scheme to Commit Cyber-attacks and Financial Crimes Across the Globe
LOS ANGELES – A federal indictment unsealed today charges three North Korean computer programmers with participating in a wide-ranging criminal conspiracy to conduct a series of destructive cyber-attacks, to steal and extort more than $1.3 billion of money…
US Department of Justice · Web page · Published 16 Jun
Russian Botnet Disrupted in International Cyber Operation
SAN DIEGO – The U.S. Department of Justice, together with law enforcement partners in Germany, the Netherlands and the United Kingdom, have dismantled the infrastructure of a Russian botnet known as RSOCKS which hacked millions of computers and other…
codeproject.com · Web page · Added 7 Apr
Access Denied
You don't have permission to access "http://www.dot-software.org/articles/coding-education-platforms-for-beginners.html?" on this server. Reference #18.696ef50.1775527577.1ad84eb Source:…
US Department of Justice · Web page · Published 17 May
Two Members of Syrian Electronic Army Indicted for Conspiracy
ALEXANDRIA, Va. – A federal grand jury returned an 11-count indictment today charging two Syrian men with offenses relating to their participation in a conspiracy to engage in computer hacking as members of the “Syrian Electronic Army” or “SEA.” Ahmad ‘Umar…
US Department of Justice · Web page · Published 28 Oct
U.S. Joins International Action Against RedLine and META Infostealers
AUSTIN, Texas – The Department of Justice joined the Netherlands, Belgium, Eurojust and other partners in announcing an international disruption effort against the current version of RedLine Infostealer, one of the most prevalent infostealers in the world…
Medium · Web page · Published 3 Dec
Investigating the use of VHD files by cybercriminals
In recent investigations, I observed an adversary making use of a VHD attachment to a spear-phishing email being sent. VHD files are ‘Virtual Hard-Disk’ files. Originally the file format was introduced with Connectix Virtual PC and it can store the contents…
Added Mon 6 Apr
Palo Alto Networks · Web page · Added 6 Apr
Palo Alto Networks - Sign In
COMPANY About Palo Alto Networks Careers LEGAL NOTICES Privacy Terms of Use RESOURCES Support Live Community Email Subscription Beacon By signing in, you agree to our Terms and acknowledge our Privacy Statement. COMPANY LEGAL NOTICES RESOURCES About Palo Alto…
rsa.com · Web page · Added 6 Apr
pandemiya-emerges-new-malware-alternative-zeus-based
MITRE ATT&CK · Web page · Added 6 Apr
Cross-Platform Detection of Data Transfer to Cloud Account, Detection Strategy DET0573
Detects snapshot sharing, backup exports, or data object transfers from victim-owned cloud accounts to other cloud identities within the same provider (e.g., AWS, Azure) using snapshot sharing, S3 bucket policy updates, or SAS URI generation. Log Sources Data…
MITRE ATT&CK · Web page · Added 6 Apr
Encrypted Channel, Technique T1573 - Enterprise
APT29 has used multiple layers of encryption within malware to protect C2 communication.[1] G1002 BITTER BITTER has encrypted their C2 communications.[2] S0631 Chaes Chaes has used encryption for its C2 channel.[3] S0498 Cryptoistic Cryptoistic can engage in…
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.