Research reports
TopicAll topics
PublisherAll publishers
- All publishers1,259
- Check Point99
- DataBreaches.net51
- GitHub50
- MITRE ATT&CK44
- Mandiant (Google)33
- Microsoft31
- Group-IB29
- Recorded Future22
- ETDA Threat Group Cards20
- Medium20
- Unit 4220
- Trend Micro19
- CISA18
- ESET17
- Malpedia15
- Team Cymru15
- ANSSI (CERT-FR)13
- Intezer13
- US Department of Justice13
- FBI IC312
- Virus Bulletin11
- PhishLabs10
- Elastic Security Labs9
- Intrinsec9
- SecurityScorecard9
- Cisco Talos8
- Kaspersky8
- Proofpoint8
- SOCRadar8
- The Hacker News8
SortNewest added
101–120 of 1,259 reports · page 6 of 63
Added Mon 19 Oct
ETDA Threat Group Cards · Web page · Added 19 Oct
listgroups.cgi?u=00fb1835-390b-490d-b6d6-7347fa39284b
ETDA Threat Group Cards · Web page · Added 19 Oct
listgroups.cgi?u=bbfe0734-20d1-4c43-a238-fffba96f49dd
symantec.com · Web page · Added 19 Oct
taiwan-targeted-new-cyberespionage-back-door-trojan
dailydarkweb.net · Web page · Added 19 Oct
threat-actor-claimed-to-breach-database-of-dimecuba
Added Sun 18 Oct
SecurityScorecard · Web page · Added 18 Oct
Resources - SecurityScorecard
The Denmark Central Population Register (CPR) breach exposed 8.8 million records through approved vendor access. See how continuous third-party risk monitoring and risk tiering reduce third-party exposure. The Simple Test That Separates Real AI Transformation…
PRODAFT · Web page · Added 18 Oct
Ragnar Loader
(a.k.a. Ragnar Locker) ransomware group, which has been inflicting targeted cyberattacks on organizations since its emergence in 2020. The Ragnar Loader, frequently identified within the threat landscape as the Ragnar Framework by its associated actors,…
Infosec Institute · Web page · Published 28 Sep
Andromeda Bot Analysis part 2
Now, you get the original Andromeda build file. Load the unpacked sample at OllyDBG. As before, after the stack frame at the EP, you see that the malware is looking to load API's address using the PEB_LDR_DATA structure, but this time instead of kernel32.dll;…
Infosec Institute · Web page · Published 29 Jul
Netwalker malware: What it is, how it works and how to prevent it
Netwalker is a data encryption malware that represents an evolution of the well-known Kokoklock ransomware and has been active since September 2019. This article will detail the specific technical features of the Netwalker ransomware. We will analyze what…
Flashpoint · Web page · Added 18 Oct
Threat Intelligence Blog
Flashpoint’s weekly analysis tracks shifting kinetic and cyber threat radiuses, geopolitical disruptions, and provides critical operational forecasts for the ongoing Middle East conflict. Insider Threats targeting enterprise environments. Insider Threat…
Flashpoint · Web page · Added 18 Oct
Threat Intelligence Blog
Flashpoint’s weekly analysis tracks shifting kinetic and cyber threat radiuses, geopolitical disruptions, and provides critical operational forecasts for the ongoing Middle East conflict. Insider Threats targeting enterprise environments. Insider Threat…
GitHub · Web page · Added 18 Oct
GitHub - FallenAstaroth/stink: the cutest python-native infostealer
WIRED · Web page · Published 4 Jun
New ATM Malware Captures PINs and Cash -- Updated
Security researchers have found malware planted on ATMs in Eastern Europe that captures PINs and magnetic stripe data from the machine's memory and instructs the machines to spit out cash, eliminating the need for primitive skimming devices and advancing the…
GitHub · Web page · Added 18 Oct
GitHub - GhostPack/SafetyKatz: SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader
First, the MiniDumpWriteDump Win32 API call is used to create a minidump of LSASS to C:\Windows\Temp\debug.bin. Then @subtee's PELoader is used to load a customized version of Mimikatz that runs sekurlsa::logonpasswords and sekurlsa::ekeys on the minidump…
Malpedia · Web page · Added 18 Oct
Kazuar (Malware Family)
There is no description at this point. References 2026-06-25 ⋅ Google ⋅ Google Threat Intelligence Group The Latest Addition to Turla’s Intelligence Gathering Apparatus Kazuar 2026-05-14 ⋅ Microsoft ⋅ Microsoft Threat Intelligence Kazuar: Anatomy of a…
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.