Threat Intelligence

An abstraction of a report against a beige background.

Iranian-Affiliated APT Targeting of Rockwell/Allen-Bradley PLCs

A digital illustration of a report or blog with connected lines on a light background.

Hackers Are Attempting to Turn ComfyUI Servers Into a Cryptomining Proxy Botnet

A broken chain with separating links rendered in orange ASCII-style line art against a dark background.

Under CTRL: Dissecting a Previously Undocumented Russian .Net Access Framework

Cutting Through the Noise: A Technique-Based Approach to Hunting Web-Delivered Malware

A digital illustration of a report or blog with connected lines on a dark background.

Exposure Brief: Iranian-Linked Wiper Attack on Global Medtech Firm Stryker

Abstract representation of a report on a light blue background.

NetSupport Manager: Tracking Dual-Use Remote Administration Infrastructure

dashboard of camera and data feeds across the Middle East and Eastern Europe

Hunting Cameras in the Dark: Finding Internet Cameras Before Adversaries Do

Abstract representation of a report on a light orange background

ResidentBat: Belarusian KGB Android Spyware at Internet Scale

Abstract representation of a report on a light blue background.

Vshell: A Chinese-Language Alternative to Cobalt Strike

Abstract representation of a report on a khaki background.

Odyssey Stealer: Inside a macOS Crypto-Stealing Operation