Research reports
1,224 reports from 387 publishers45 added in the past week
Added Sat 25 Jul
JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake
In mid-April 2026, an exposed directory on an operator-owned Alibaba Cloud server gave us a complete view into an active China-nexus operation. The server with bash history, toolkits, webshell paths against victims, and staged phishing packages were all…
Phishing
Added Fri 1 May
PerSwaysion Campaign
In the first quarter of 2020, Group-IB Threat Intelligence team received a lead concerning corporate email account compromise of an Asia-based company. A joint investigation of Group-IB DFIR and Threat Intelligence teams reveals an uptrending phishing…
Phishing
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.