Research reports
1,224 reports from 387 publishers45 added in the past week
5 reports, newest added first
Added Fri 17 Apr
GrayCharlie Hijacks Law Firm Sites in Suspected Supply-Chain Attack
Insikt Group has been monitoring GrayCharlie, a threat actor overlapping with SmartApeSG and active since mid-2023, for some time, and is now publishing its first report on the group. GrayCharlie compromises WordPress sites and injects them with links to…
MalwareSupply chain
Added Tue 8 Jul 2025
GrayAlpha Uses Diverse Infection Vectors to Deploy PowerNet Loader and NetSupport RAT
Insikt Group identified three GrayAlpha infection vectors: fake browser updates, fake 7-Zip sites, and the use of the TDS TAG-124 network, which had not been publicly linked to GrayAlpha until now. Insikt Group discovered PowerNet, a new PowerShell loader,…
Malware
Added Sat 10 May 2025
TerraStealerV2 and TerraLogger: Golden Chickens’ New Malware Families Discovered
CYBER THREAT ANALYSIS TerraLogger represents the first observed use of a keylogging capability in malware developed by Golden Chickens. Insikt Group observed ten distinct TerraStealerV2 distribution samples between January and March 2025, delivered in varied…
Malware
Added Sat 28 Dec 2024
BlueAlpha Abuses Cloudflare Tunneling Service for GammaDrop Staging Infrastructure
BlueAlpha continues to target Ukrainian entities with spearphishing campaigns, leveraging HTML smuggling attachments to deliver Visual Basic Script (VBScript)-based malware. BlueAlpha continues to use domain name system (DNS) fast-fluxing of GammaLoad…
Malware
Added Sat 28 Sep 2024
Rhadamanthys Stealer Adds
Detections and preventative measures unveiled for Rhadamanthys Stealer v0.7.0 provide an effective defense against this evolving threat, offering organizations strategies to prevent data theft and strengthen security. Rhadamanthys Stealer v0.7.0 is a global…
MalwareInfostealers
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.