Research and Analysis

Start your day with a concise and succinct digest of the most important security happenings of the past 24 hours delivered straight to your inbox Monday through Friday.

May 30, 2024

Behind the Code: Deciphering the Evolution of Agent Tesla Malware

Origin: 2014 Aliases: Tesla Agent, ATesla, TeslaKey, OriginLogger Targeted Sectors: Financial Services, Healthcare, Manufacturing, Retail, Information Technology, Automotive, Travel, Targeted Countries: United States, United Kingdom,

May 3, 2024

The Agenda Saga: Exploring Ransomware's Newest Frontier

First observed: 2018 Aliases: Agenda Targeted Sectors: Manufacturing, IT, Education, Government Agencies, Finance, Healthcare, Legal, Telecom Targeted Countries: Australia, Brazil, Canada, Colombia, France, Netherlands, Serbia, Japan,

Feb 20, 2024

Rising Tides: The Swift Emergence of 8Base

Origin : April, 2022 Aliases : 8Base, EightBase, 8Base Ransomware Targeted Sectors : Manufacturing, Construction, Healthcare, Professional Services, Retail, Finance, Information Technology Targeted Countries : The U.S., Brazil, the U.K

Jan 10, 2024

Inside Fancy Bear's Arsenal: An Update on the Cyber Tactics of APT28

Origin: 2007 Aliases: APT 28, APT-C-20, ATK5, Blue Athena, FANCY BEAR, FROZENLAKE, Fighting Ursa, Forest Blizzard, G0007, Grey-Cloud, Grizzly Steppe, Group 74, Group-4127, IRON TWILIGHT, ITG05, Pawn Storm, SIG40, SNAKEMACKEREL, STRONTIUM, Sednit

Nov 22, 2023

Symphony of Intrusion: Turla APT's Orchestrated Attacks Across Borders

Origin: 2004 Aliases: Snake, Venomous Bear, Group 88, Waterbug, WRAITH, Uroburos, Pfinet, TAG_0530, KRYPTON, Hippo Team, Pacifier APT, Popeye, SIG23, Iron Hunter, MAKERSMARK, ATK13, G0010, ITG12, Blue Python, SUMMIT, UNC4210 Targeted Sector

Oct 25, 2023

Beneath the Surface: AvosLocker's Ransomware-as-a-Service and Cybercrime Tactics

Origin: June 2021 Aliases: None Targeted Sectors: Manufacturing, Financial Services, Government, Automotive, Trucking, Healthcare, Hospitality, Education, Retail Targeted Regions: The U.S., Syria, Saudi Arabia, Germany, Spain, Belgium,

Sep 25, 2023

Tracking Lazarus APT: From Espionage to Financial Crimes

Origin: 2007 Aliases : APT38, Labyrinth Chollima, HIDDEN COBRA, Guardians of Peace, ZINC, NICKEL ACADEMY, Stardust Chollima, BeagleBoyz, Whois Team, Gods Apostles, Gods Disciples, Bluenoroff, Andariel, UNC4736 Targeted Sectors :** Governmen

Aug 31, 2023

The Evolution and Exploits of FIN7: From PoS Malware to Ransomware Dominance

Origin: 2013 Aliases: GOLD NIAGARA, ITG14, Carbon Spider, ALPHV, and BlackCat Key Target Sectors: Finance, Retail, Restaurant, Hospitality, Attack Vectors: Spam Email, Data Theft, Keylogging, Spearphishing, Backdoor Target Region

Aug 16, 2023

Cl0p Unleashed: Unraveling Massive-Scale Attacks and Exploitation Strategies

Origin: February 2019 Aliases: Cl0p, CryptoMix, TA505 Targeted Sectors: Retail, Transportation, Education, Manufacturing, Energy, Financial, Telecommunications, Legal Services, and Healthcare Targeted Regions: North America, Eastern

Jun 16, 2023

Ten Years Top: Charming Kitten's Tale of Cybercrime

Origin: 2014 Aliases: Newscaster, Parastoo, iKittens, Group 83, NewsBeef, G0058, APT35, PHOSPHORUS, Yellow Garuda, TA453, UNC788, ITG18 Key Target Sectors: Government, Defense, Technology, Military, and Diplomacy Attack Vectors: Spearp

May 15, 2023

Ursnif Trojan: A Classic Example of Malware Persistence and Adaptability

Origin: 2007 Aliases: Ursnif, Gozi, Dreambot, ISFB, ISFB3, LDR4, Goziv3, Goziv2, Goziat Targeted Sectors: Finance, Technology, Government Targeted Regions: North America, Eastern Europe, Western Europe, Eastern Asia Motivation:

Mar 20, 2023

The Rise of BlackCat Ransomware: A Dark Tale of Cybercrime

Origin: November 2021 Aliases: ALPHV-ng, Noberus, ALPHV, AlphaV, AlphaVM Targeted Sectors: Finance, Legal, Technology, Energy, Healthcare, Manufacturing Targeted Regions: North America, Oceania, Eastern Europe, Western Europe Mo