Research reports
1,224 reports from 387 publishers45 added in the past week
2 reports, newest added first
Added Fri 7 Aug
Analysis of the Connection Between Xctdoor and Past CRAT Attack Cases (Larva-26005)
AhnLab SEcurity intelligence Center (ASEC) recently confirmed that the Larva-26005 threat actor is distributing Xctdoor to users in Korea. Xctdoor was disclosed through the ASEC blog in 2024, and [1] In March 2026, Hauri disclosed an attack case in which the…
Malware
Analysis of a Phishing Email Attack Case by the Larva-24009 Threat Actor
The Larva-24009 threat actor has been active since at least 2023, carrying out phishing email attacks targeting users both in Korea and globally to install malware. ASEC (AhnLab SEcurity intelligence Center (ASEC) has previously disclosed attack cases by this…
MalwarePhishing
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.