Research reports

Vendor, government and researcher reports that CyberSIXT links from its coverage, with their publishers and topics.

1,289 reports400 publishers97 added in the past week

1,081–1,100 of 1,289 reports · page 55 of 65

Added Fri 24 Oct 2025

logpoint.com · PDF · Added 24 Oct
logpoint-etpr-a-comprehensive-overview-on-stealer-malware-families-1.pdf?hsLang=en
Over the years, the Logpoint Security Research Team has dedicated efforts on researching emerging threats in the Cybersecurity landscape. As we move into 2024, one trend continues to remains as a significant threat: Stealer Malware also known as Info…
Malware Infostealers Original (new tab)

botconf.eu · PDF · Added 16 Oct
Botconf2022-19-FaouCoteCyr.pdf
Operation Cache Panda: Zero-Day in Financial Software Exploited by China-Linked Threat Group Valentine’s Day this year saw the end of a truly toxic relationship — a prolonged supply chain attack targeting the Taiwan financial and securities trading sector…
State-sponsored Malware Vulnerabilities Supply chain Original (new tab)
aryaka.com · PDF · Added 16 Oct
BatShadow Threat Research Report
Varadharajan K and Aditya K Sood BatShadow’s Latest Play Vietnamese Threat Group Uses Vampire Bot to Target Digital Professionals www.aryaka.com BatShadow’s Latest Play: Vietnamese Threat Group Uses Vampire Bot to Hunt Digital Professionals - Report 2 Table…
Original (new tab)
Virus Bulletin · PDF · Added 16 Oct
DeceptiveDevelopment-and-North-Korean-IT-workers-from-primitive-crypto-theft-to-sophisticated-AI-based-deception.pdf
DECEPTIVEDEVELOPMENT: FROM PRIMITIVE CRYPTO THEFT TO... HAVRÁNEK & KÁLNAI 2 VIRUS BULLETIN CONFERENCE SEPTEMBER 2025 ABSTRACT DeceptiveDevelopment, also known as Contagious Interview, is a North Korea-aligned group whose activities have increased in…
Original (new tab)

SOCRadar · PDF · Added 2 Oct
BQTLock Ransomware
BQTLock is an advanced ransomware-as-a-service (RaaS) that has emerged in recent months and is entering the scene in a disruptive way. Its operations, attack methods, and malware features stand out from other ransomware groups. Originating from the East and…
Ransomware Original (new tab)

aryaka.com · PDF · Added 10 Sep
Vidar Infostealer in Action
Vidar Infostealer in Action From API Hooking to Covert Data Exfiltration Bikash Dash and Varadharajan Krishnasamy www.aryaka.com Vidar Infostealer in Action: From API Hooking to Covert Data Exfiltration - Report 2 Table of Contents 03 03 03 04 04 06 06 06 07…
Infostealers Original (new tab)
2655225.fs1.hubspotusercontent-na1.net · PDF · Added 10 Sep
cyber
StealeriumPy: A Stealerium variant distributed through ClickFix Executive Summary Key Takeaways Infection Chain Summary of the Analysis Technical Analysis Part 1: Analysis of the Stealerium Loader Part 2: Analysis of the Stealerium Payload Modules…
Malware Original (new tab)

Intrinsec · PDF · Added 30 Aug
Untitled
Original (new tab)
Anthropic · PDF · Added 30 Aug
b2a76c6f6992465c09a6f2fce282f6c0cea8c200.pdf
Vibe hacking: how cybercriminals are using AI coding agents to scale data 4 extortion operations Remote worker fraud: how North Korean IT workers are scaling fraudulent 11 employment with AI No-code malware: selling AI-generated ransomware-as-a-service 15…
Ransomware Malware Original (new tab)

CISA · PDF · Added 17 Aug
Iranian Cyber Actors May Target Vulnerable US Networks and Entities of Interest
Overview The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), the Departmen
Original (new tab)
Recorded Future · PDF · Added 17 Aug
DRAT V2: Updated DRAT Emerges in TAG-140’s Arsenal
DRAT V2 updates its C2 obfuscation by adding junk strings before Base64- encoding IPs, likely to impede basic decoding and evade detection by automated tools. TAG-140 continues to favor simplicity over stealth by using ClickFix-style social engineering…
Original (new tab)
FBI IC3 · PDF · Added 17 Aug
Scattered Spider
To report suspicious or criminal activity related to information found in this joint Cybersecurity Advisory, contact your local FBI field office or CISA’s 24/7 Operations Center at SOC@mail.cisa.dhs.gov or 1-844-Say-CISA (1-844-729-2472). When available,…
Original (new tab)
Sonatype · PDF · Added 17 Aug
How-North-Korea-Backed-Lazarus-Group-is-Weaponizing-Open-Source-Whitepaper.pdf
How North Korea-Backed Lazarus Group Is Weaponizing Open Source to Target Developers 1 How North Korea-Backed Lazarus Group Is Weaponizing Open Source to Target Developers Sonatype Security Research How North Korea-Backed Lazarus Group Is Weaponizing Open…
State-sponsored Malware Original (new tab)

aryaka.com · PDF · Added 16 Aug
Kimsuky Threat Research Report-2
From Reconnaissance to Control APT The Operational Blueprint of Kimsuky for Cyber Espionage Varadharajan Krishnasamy and Aditya K Sood www.aryaka.com From Reconnaissance to Control: The Operational Blueprint of Kimsuky APT for Cyber Espionage - Report 2 Ta bl…
State-sponsored Original (new tab)
quickheal.co.in · PDF · Added 16 Aug
Whitepaper_HowToPM_QuickHeal
3.1 How Emotet is compromising websites and using it as a threat distributor? 03 3.2 How malware are evading Detections on webservers: 03 3.2.1 Initial Infection Scripts: 04 A. Edit.php: 04 B. Remote.php: 05 C. Settings.php: 05 D. Minify.php: 05 E.…
Malware Original (new tab)

prod.website-files.com · PDF · Added 29 Jul
CTM360 Report: PlayPraetor Trojan - Clear TLP
A large-scale scam campaign has been uncovered, actively targeting users through fraudulent Google Play Store download pages. Detected by CTM360, this scheme involves meticulously crafted fake Play Store websites that closely mi
Malware Original (new tab)

Recorded Future · PDF · Added 25 Jul
Anatomy of DDoSia: NoName057(16)'s DDoS Infrastructure and Targeting
NoName057(16) uses a resilient, multi-tiered infrastructure featuring rapidly rotated Tier 1 command-and- control (C2) servers and access- controlled Tier 2 servers to enhance operational security. NoName057(16) maintains a high operational tempo, averaging…
Botnets and DDoS Original (new tab)

Recorded Future · PDF · Added 23 Jul
Full Spectrum Detections for 5 Popular Web Shells: Alfa, SharPyShell, Krypton, ASPXSpy, and TWOFACE
Alfa, Krypton, SharPyShell, ASPXSpy, and TWOFACE. It contains details on the capabilities of the web shells and host-based and network-based detections. This report is intended for security operations audiences who focus on detection engineering. Sources…
Original (new tab)

vblocalhost.com · PDF · Added 22 Jul
VB2020 paper: SilentFade: unveiling a malware ecosystem that targeted the Facebook ad platform
2 VIRUS BULLETIN CONFERENCE SEPT - OCT 2020 INTRODUCTION All successful malware campaigns require a medium for proliferation. Originally, malware relied on emails, software piracy over peer-to-peer services, and autorun functionality from removable drives,…
Malware Original (new tab)

SecurityScorecard · PDF · Added 18 Jul
How to Analyze Java Malware – A Case Study of STRRAT
STRRAT is a Java-based malware that executes multiple commands transmitted by the C2 server. The JAR file was obfuscated using the Allatori obfuscator. It establishes persistence on the host by copying to the Startup folder and creating a scheduled task and a…
Malware Original (new tab)

Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.