In January 2022, Kaspersky ICS CERT experts detected a wave of targeted attacks on military industrial complex enterprises and public...

A look back at some of the key moments in an intrusion from April 2022, when the BumbleBee malware loader was used to access a...

Researchers identified the ROADSWEEP ransomware family and a Telegram persona which targeted the Albanian government in a politically...

Researchers have been tracking a rapidly evolving IoT malware family known as “RapperBot” since mid-June 2022. This family borrows...

DGA is a classic botnet adversarial detection technology. Its principle is to use a certain DGA algorithm, combined with a specific seed...

Among the threat actors distributing Bumblebee is Projector Libra. Also known as EXOTIC LILY, Projector Libra is a criminal group that...

A security researcher has identified a fake Atomic wallet website distributing Mars Stealer, a malicious form of Cryptocurrency wallet,...

Security researchers identified a new Remote Access Trojan we are calling Woody Rat that has been in the wild for at least one year. This...

Security researchers discovered a new strain of a large-scale phishing campaign, which uses adversary-in-the-middle (AiTM) techniques...

Security researchers recently discovered a new attack framework called "Manjusaka" being used in the wild that has the potential to...

Security researchers recently analyzed a sample of a new SolidBit ransomware variant that targets users of popular video games and social...

Raccoon is a malware family that has been sold as malware-as-a-service on underground forums since early 2019. In early July 2022, a new...

BPFDoor is a Linux/Unix backdoor that allows threat actors to remotely connect to a Linux shell to gain complete access to a compromised...

An analysis of three in-the-wild payloads delivered using the recently discovered Follina exploit shows how attackers can use it to...

Security researchers captured a batch of suspected Android-side attack samples of the SideWinder organization. Sidewinder (APT-Q-39, also...

Security researchers identified new malware on the Google Play Store. The malware hides and continuously show advertisements to victims....

Matanbuchus is a malware-as-a-Service loader that has been sold on underground markets for more than a year, but can also be rented to...

A European private-sector offensive actor (PSOA) has developed malware used in a series of targeted attacks against Microsoft customers...

A few days ago InQuest discovered a very interesting sample that was uploaded from Iran. The document is a contract for the supply of...

Gootkit has been known to use fileless techniques to drop Cobalt Strike and other malicious payloads. Insights from a recent attack...