Research reports
1,224 reports from 387 publishers45 added in the past week
2 reports, newest added first
Added Sat 12 Apr 2025
TAG-124’s Multi-Layered TDS Infrastructure and Extensive User Base
The operators behind TAG-124 show high levels of activity, frequently updating compromised WordPress sites, setting up new servers, and refining TDS-related conditional logic and infection techniques. Numerous threat actors have relied on or continue to use…
Ransomware
Added Fri 15 Nov 2024
Outmaneuvering Rhysida: How Advanced Threat Intelligence Shields Critical Infrastructure from Ransomware
Insikt Group identified Rhysida’s multi-tiered infrastructure, including typosquatted domains for SEO poisoning, payload servers, CleanUpLoader C2 servers, and higher-tier admin and Zabbix servers. This research builds on previous findings showing that…
Ransomware
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.