Research reports
1,224 reports from 387 publishers45 added in the past week
2 reports, newest added first
Added Tue 1 Sep
Carry-On Compromise: TA4922 Packs PackClient
August 27, 2026 Kyle Cucci, Rob Kinner, Tony Robinson and the Proofpoint Threat Research Team Key Findings Proofpoint identified a command and control (C2) framework called PackClient sold on Telegram. It is being used by at least one threat actor,…
Malware
Added Fri 12 Jun
TA4922: The Suspected Chinese Crime Group is Going Global
TA4922 is a highly sophisticated threat actor demonstrating a rapid operational tempo and continually evolving malware arsenal. The group has been observed using multiple malware families including Atlas RAT, RomulusLoader, SilentRunLoader, and ValleyRAT…
Malware
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.