Research reports
TopicAll topics
PublisherAll publishers
- All publishers1,289
- Check Point99
- DataBreaches.net51
- GitHub50
- MITRE ATT&CK44
- Mandiant (Google)34
- Microsoft31
- Group-IB29
- Recorded Future22
- Unit 4221
- ETDA Threat Group Cards20
- Medium20
- Trend Micro20
- CISA18
- ESET17
- Malpedia15
- Team Cymru15
- ANSSI (CERT-FR)13
- Intezer13
- US Department of Justice13
- Cisco Talos12
- FBI IC312
- Virus Bulletin11
- Elastic Security Labs10
- PhishLabs10
- The Hacker News10
- The Record10
- Intrinsec9
- Kaspersky9
- SecurityScorecard9
- Cybernews8
SortNewest added
1,041–1,060 of 1,289 reports · page 53 of 65
Added Thu 2 Apr
heimdalsecurity.com · Web page · Published 5 Apr
Powerhost’s ESXi Servers Encrypted with New SEXi Ransomware
IxMetro Powerhost, a Chilean data center and hosting provider, has become the latest target of a cyberattack by a newly identified ransomware group dubbed SEXi. This malicious group successfully encrypted the company’s VMware ESXi servers, which host virtual…
connectwise.com · Web page · Added 2 Apr
Resource Center
Learn how ransomware, trust abuse, and AI reshaped cyber risk and what MSPs must do to stay ahead. eBook The Age of Autonomous Service Delivery Discover how AI-driven agents, clean data, and platform-enabled operations are redefining IT service delivery.
ETDA Threat Group Cards · Web page · Added 2 Apr
Threat Group Cards: A Threat Actor Encyclopedia
Home > List all groups > List all tools > List all groups using tool Janeleiro Tool: Janeleiro Names Janeleiro Category Malware Type Banking trojan, Backdoor, Keylogger, Info stealer, Credential stealer Description (ESET) This new threat, which we’ve named…
MITRE ATT&CK · Web page · Added 2 Apr
Detection of Alarm Suppression, Detection Strategy DET0728
Monitor for loss of network traffic which could indicate alarms are being suppressed. A loss of expected communications associated with network protocols used to communicate alarm events or process data could indicate this technique is being used. This will…
Added Wed 1 Apr
Trend Micro · PDF · Added 1 Apr
Operation Poisoned News: Hong Kong Users Targeted with Mobile Malware via Local News Links
By Elliot Cao, Joseph C. Chen, William Gamazo Sanchez, Lilang Wu, and Ecular Xu Contents 1 Attack Chain 1.1 Watering hole attack tactic 1.2 Infection chain 2 Exploits Analyses 2.1 The JavaScriptCore exploit 2.1.1 Bug triggering 2.1.2 The addrof/fakeobj…
Added Tue 24 Mar
Virus Bulletin · PDF · Added 24 Mar
Google-Calendar-as-C2-infrastructure-a-China-nexus-campaign-with-stealthy-tactics.pdf
GOOGLE CALENDAR AS C2 INFRASTRUCTURE: A CHINA-NEXUS CAMPAIGN... CHEN & HSU 2 VIRUS BULLETIN CONFERENCE SEPTEMBER 2025 ABSTRACT In recent years, China-nexus threat groups have increasingly adopted tactics to obscure their malware footprint, particularly…
Added Thu 5 Mar
ClearSky · PDF · Added 5 Mar
ClearSky report on BadPaw and MeowMeow Russian malware
P a g e 2 ClearSky Team has identified a targeted Russian cyber campaign against Ukraine utilizing two novel malware strains, BadPaw and MeowMeow. The attack chain initiates with a phishing email containing a link to a ZIP archive. Once extracted, an initial…
Added Thu 26 Feb
ANSSI (CERT-FR) · PDF · Added 26 Feb
CERTFR-2019-CTI-009.pdf
Ces dernières semaines, l’ANSSI a observé plusieurs attaques impliquant le déploiement du rançongiciel Clop sur des systèmes d’information en France. Ce code malveillant chiffre les documents présents sur les SI et leur ajoute, suivant les versions,…
CERT Polska · PDF · Added 26 Feb
201106_hamweq.pdf
Botmaster - osoba sprawująca kontrolę nad botnetem poprzez serwer CC. Zombie - zainfekowany komputer pod kontrolą botmastera. Botnet - zbiór komputerów Zombie, połączonych do danego serwera CC. Server CC - serwer poprzez który sprawowana jest kontrola nad…
ANSSI (CERT-FR) · PDF · Added 26 Feb
CERTFR-2020-CTI-012.pdf
Depuis la mi-septembre 2020, l’ANSSI constate une vaste campagne d’attaques informatiques menées à l’aide du rançongiciel Egregor. À date, au moins 69 organisations, dont certaines entreprises françaises auraient été ciblées [1] [2]. En tant que rançongiciel,…
Added Sat 31 Jan
CERT Polska · PDF · Added 31 Jan
Energy Sector Incident Report – 29 December
(CERT.PL) – a team operating within the structures of NASK – National Research Institute, carrying out the tasks of CSIRT NASK, one of the three national‑level CSIRT teams operating within Poland’s national cybersecurity system. The Author of This Report Is:…
Added Thu 29 Jan
Virus Bulletin · PDF · Added 29 Jan
Down-the-GRAYRABBIT-hole-exposing-UNC3569-and-its-modus-operandi.pdf
2 VIRUS BULLETIN CONFERENCE OCTOBER 2024 ABSTRACT In this paper we provide an in-depth analysis of UNC3569, a prolific and sophisticated threat actor operating within the Chinese cybercriminal and cyber contractor-for-hire ecosystem, mostly operating out of…
Added Wed 28 Jan
rsf.org · PDF · Added 28 Jan
ResidentBat: A new spyware family used by Belarusian KGB
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.