APT42: AI-Assisted Rapport Phishing and a More Resilient TAMECAT
Executive Summary APT42 continues to refine a familiar operating model, making it harder to detect...
Read More
From Windows Telemetry to Arrest: How Microsoft’s GDID Helped Connect the Dots
Executive Summary The arrest and extradition of an alleged Scattered Spider member drew attention...
Read More
LoaderClient Malware Analysis: How WeedHack Uses Ethereum Smart Contracts for Resilient C2 Infrastructure
Executive Summary LoaderClient is a Minecraft-based malware loader linked to the WeedHack...
Read More
Inside Modern Supply Chain Intrusions: From CI/CD Abuse to Ecosystem-Wide Compromise
Modern supply chain intrusions are attacks that compromise trusted software development systems,...
Read More
Salat Stealer Analysis: Go-Based RAT, C2 Resilience, and Info-Stealing Capabilities
Executive Overview Salat Stealer is a sophisticated Go-based Remote Access Trojan (RAT) with deep...
Read More
Beyond TTPs: A Better Way to Attribute APT Activity Through Campaign Linkage
Introduction Attribution in cyber threat intelligence has long been built around the concept of...
Read More
Crypto Money Laundering
Crypto Money Laundering: Definition, Stages, and Common Techniques Money laundering is the process...
Read More
Smishing Triad Targets Egypt’s Financial Sector and Postal Services
Recently, during one of our threat hunting operations, our squad identified multiple malicious...
Read More
MuddyWater: Inside Iran’s Persistent Cyber-Espionage Group Targeting the Middle East
MuddyWater, a long-running Iranian cyber-espionage group affiliated with Iran’s Ministry of...
Read More
Marketing’s Shadow Twin: Cybercrime’s Use of Legitimate Online Platforms
Introduction digital analytics tools—such as link shorteners, location trackers, CAPTCHAs, and...
Read More