Research reports
TopicAll topics
PublisherAll publishers
- All publishers1,289
- Check Point99
- DataBreaches.net51
- GitHub50
- MITRE ATT&CK44
- Mandiant (Google)34
- Microsoft31
- Group-IB29
- Recorded Future22
- Unit 4221
- ETDA Threat Group Cards20
- Medium20
- Trend Micro20
- CISA18
- ESET17
- Malpedia15
- Team Cymru15
- ANSSI (CERT-FR)13
- Intezer13
- US Department of Justice13
- Cisco Talos12
- FBI IC312
- Virus Bulletin11
- Elastic Security Labs10
- PhishLabs10
- The Hacker News10
- The Record10
- Intrinsec9
- Kaspersky9
- SecurityScorecard9
- Cybernews8
SortNewest added
1,161–1,180 of 1,289 reports · page 59 of 65
Added Mon 27 Jan 2025
CISA · PDF · Added 27 Jan
MAR-10454006.r1.v2.CLEAR
This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained herein. The DHS does not endorse any commercial product or service…
CISA · PDF · Added 27 Jan
MAR-10454006.r5.v1.CLEAR__0.pdf
This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained herein. The DHS does not endorse any commercial product or service…
CISA · PDF · Added 27 Jan
MAR-10454006.r2.v1.CLEAR
This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained herein. The DHS does not endorse any commercial product or service…
CISA · PDF · Added 27 Jan
MAR-10454006.r4.v2.CLEAR_.pdf
This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained herein. The DHS does not endorse any commercial product or service…
CISA · PDF · Added 27 Jan
MAR-10459736.r1.v1.CLEAR_.pdf
This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained herein. The DHS does not endorse any commercial product or service…
CISA · PDF · Added 27 Jan
MAR-10454006.r3.v1.CLEAR
This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained herein. The DHS does not endorse any commercial product or service…
Added Fri 24 Jan 2025
Added Thu 16 Jan 2025
Recorded Future · PDF · Added 16 Jan
Chinese State-Sponsored RedDelta Targeted Taiwan, Mongolia, and Southeast Asia with Adapted PlugX Infection Chain
The group has used LNK files and MSC files as the first-stage components and ultimately loaded PlugX via search order hijacking. The group consistently used Cloudflare's CDN to proxy C2 traffic to threat actor-controlled C2 servers. This enables RedDelta to…
Added Wed 15 Jan 2025
Spamhaus · PDF · Added 15 Jan
Jul-Dec 2024 Botnet Threat Update.pdf
This report provides an overview of the number of botnet C&Cs associated with these elements, along with a quarterly comparison. We discuss the trends we are observing and highlight service providers struggling to control the number of botnet operators…
Added Wed 8 Jan 2025
Added Mon 30 Dec 2024
Added Sat 28 Dec 2024
FBI IC3 · PDF · Added 28 Dec
Microsoft Word - JCSA-20241030-001
New Tradecraft of Iranian Cyber Group Aria Sepehr Ayandehsazan aka Emennet Pasargad Summary The Federal Bureau of Investigation (FBI), U.S. Department of Treasury, and Israel National Cyber Directorate are releasing this Cybersecurity Advisory (CSA) to
Recorded Future · PDF · Added 28 Dec
BlueAlpha Abuses Cloudflare Tunneling Service for GammaDrop Staging Infrastructure
BlueAlpha continues to target Ukrainian entities with spearphishing campaigns, leveraging HTML smuggling attachments to deliver Visual Basic Script (VBScript)-based malware. BlueAlpha continues to use domain name system (DNS) fast-fluxing of GammaLoad…
Recorded Future · PDF · Added 28 Dec
Rusia-Aligned TAG-110 Targets Asia and Europe with HATVIBE and CHERRYSPY
Since July 2024, 62 victims of custom malware HATVIBE and CHERRYSPY have been found across eleven countries, mostly in Central Asia, targeting government, human rights, and education sectors. Similar to other recent Russian APT campaigns, the group likely…
Added Tue 17 Dec 2024
app.box.com · Web page · Added 17 Dec
Operation Triangulation: The last (hardware) mystery
Boris Larin Today, on December 27, 2023, we (Boris Larin, Leonid Bezvershenko, and Georgy Kucherin) delivered a presentation, titled, “Operation Triangulation: What You Get When Attack iPhones of Researchers”, at the 37th Chaos Communication Congress (37C3),…
Virus Bulletin · PDF · Added 17 Dec
The-Mask-has-been-unmasked-again.pdf
The Mask (also known as Careto) is an advanced threat actor that has been operating since at least 2007. In the past, it was observed to conduct cyber espionage campaigns that mainly targeted high-profile organizations. This actor’s attacks have always been…
Added Sat 14 Dec 2024
Virus Bulletin · PDF · Added 14 Dec
Let's go door with KCP
In 2022 we observed the use of new APT malware by an unknown China-based APT actor across several incidents in Japan. The malware uses KCP protocol for backdoor communication and was coded in Golang on multiple platform operating systems – we named it…
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.