2023-09-21 00:00 UTC
Security Journalism
Security Journalism
Understanding Evil: How to Reverse Engineer Malware | Huntress
Dive into the fundamentals of reverse engineering malware and understanding how malicious software works.
P0
LATEST
Aggregated cybersecurity reporting, advisories and research. 524 matching records.
AUTO-POLL // 2026-10-18 09:30 UTC
CYBER INTEL TEMPERATURE
TODAY'S AGGREGATED INTELLIGENCE
COOL
COOL
WARM
ELEVATED
HOT
CRITICAL
P5 / P100
7-DAY C.I.T. REPORT
CYBER CONDITIONS // DAILY C.I.T. READINGS
TODAY → 6 DAYS AGO
TODAY
Oct 18
RANSOMWARE
P5
COOL // 3 ARTICLES
SAT
Oct 17
ACTIVE EXPLOITATION
P4
COOL // 12 ARTICLES
FRI
Oct 16
RANSOMWARE
P8
COOL // 56 ARTICLES
THU
Oct 15
ACTIVE EXPLOITATION
P7
COOL // 87 ARTICLES
WED
Oct 14
RANSOMWARE
P8
COOL // 74 ARTICLES
TUE
Oct 13
ACTIVE EXPLOITATION
P7
COOL // 73 ARTICLES
MON
Oct 12
RANSOMWARE
P5
COOL // 42 ARTICLES
2023-09-07 00:00 UTC
Security Journalism
Security Journalism
Evolution of USB-Borne Malware, Raspberry Robin | Huntress
A deep dive into the USB-borne Raspberry Robin malware and how Huntress Managed EDR and Managed Antivirus can detect and mitigate this threat.
P0
2023-08-30 00:00 UTC
Security Journalism
Security Journalism
Qakbot Malware Takedown and Defending Forward | Huntress
With the FBI's takedown of Qakbot malware, we're sharing how the Huntress team developed our own Qakbot vaccine and our commitment to defend forward.
P0
2023-08-29 00:00 UTC
Security Journalism
Security Journalism
Threat Hunting and Tactical Malware Analysis | Huntress
Dive into the basics of threat hunting and tactical malware analysis, and learn how these two practices go hand in hand in cybersecurity.
P0
2023-08-14 07:59 UTC
Other
Other
Breaking down Gigabud banking malware with Group-IB Fraud Matrix
Uncover the disruptive nature of Gigabud malware and take proactive measures to mitigate the associated risks
P0
2023-06-28 00:00 UTC
Security Journalism
Security Journalism
dmXProtect: Stop, Drop, Shut Malware Down
Do you need third-party security for macOS? Discover if Apple’s malware prevention products, XProtect and XProtect Remediator, are good enough solutions to keep users safe.
P0
2023-05-02 08:59 UTC
Other
Other
Managed upgrades. Enhance malware analysis efficiency with Group-IB Malware Detonation Platform updates
New and modified malware detonation capabilities in Group-IB’s Managed XDR and Business Email Protection solutions for precise threat detection and analysis
P0
2023-03-30 00:00 UTC
Security Journalism
Security Journalism
3CX VoIP Software Compromise & Supply Chain Threats | Huntress
The 3CX VoIP Desktop Application has been compromised to deliver malware via legitimate 3CX updates. Huntress has been investigating this incident and working to validate and assess the current supply chain threat to the security community.
P0
2023-02-20 09:52 UTC
Other
Other
Bad Behaviour: How to detect banking trojans
Mobile banking users are being manipulated by attackers to authorize fraudulent transactions. Learn what financial service providers can do to render these organized crimes powerless.
P0
2023-02-17 07:57 UTC
Other
Other
Package deal: Malware bundles causing disruption and damage across EMEA
What happens when you combine ransomware with information stealers, remote access Trojans, and other malware in one easy-to-download package?
P15
2022-12-21 13:38 UTC
Other
Other
Godfather Trojan – mobile banking malware that is impossible to refuse
Group-IB discovers banking Trojan targeting users of more than 400 apps in 16 countries
P0
2022-10-24 07:31 UTC
Other
Other
Treasure trove. Alive and well point-of-sale malware
Analysis of months-long MajikPOS and Treasure Hunter campaign that infected dozens of terminals
P0
2022-08-11 15:39 UTC
Other
Other
Challenge accepted
Detecting MaliBot, a fresh Android banking trojan, with a Fraud Protection solution
P0
2022-06-24 15:42 UTC
Other
Other
P0
2022-04-26 00:00 UTC
Security Journalism
Security Journalism
Bring Your Own Command & Control (BYOC2)
Sometimes hackers can be overly confident in their malware. Take a journey with us through a malware sample that contains no obfuscation whatsoever.
P0
2022-04-25 12:00 UTC
Government
Government
Malware analysis report on SparrowDoor malware
A technical analysis of a new variant of the SparrowDoor malware.
P0
2022-03-08 00:00 UTC
Other
Other
Autopilot node compromise via allowlisted workload masquerade
Unit 42 researchers disclosed several vulnerabilities and attack techniques in GKE Autopilot to Google, the root cause being insufficient verification of allowlisted workload image names. An attacker with permissions to create a pod could have abused these vulnerabilities to (1) escape their pod and compromise the underlying node, (2) escalate privileges and become full cluster administrators, and (3) covertly persist administrative access through backdoors that are completely invisible to clus…
P0
2022-03-01 00:00 UTC
Security Journalism
Security Journalism
Targeted APT Activity: BABYSHARK Is Out for Blood | Huntress
We discovered malicious, targeted advanced persistent threat (APT) activity on a partner's system. Here, we dive into the BABYSHARK malware strain.
P0
2021-09-10 00:00 UTC
Other
Other
Org policies bypass
Allows an attacker with privileges in the account to share resources outside of the account even when an org policy restricts this, thus enabling them to backdoor their access.
P0
2021-09-07 00:00 UTC
Security Journalism
Security Journalism
Malware Deep Dive | Huntress
In this blog, read along as we investigate a malicious foothold and decode the payload step by step.
P0
2021-08-17 00:00 UTC
Security Journalism
Security Journalism
Snakes on a Domain: An Analysis of a Python Malware Loader | Huntress
Join us on a threat analysis journey as we discover a very shady Python—and a very friendly RAT.
P0
2021-07-02 07:51 UTC
Other
Other
P0
2021-06-15 00:00 UTC
Security Journalism
Security Journalism
ThreatOps Analysis: Keyed Malware | Huntress
Dive into a threat analysis with us as we dissect a PowerShell command with an environmentally keyed malware payload.
P0
2021-05-25 00:00 UTC
Security Journalism
Security Journalism
Cobalt Strikes Again: An Analysis of Obfuscated Malware | Huntress
Join us for a threat hunting adventure as we analyze a suspicious run key that leads us to Cobalt Strike malware hidden across nearly 700 registry values.
P0
2021-05-04 00:00 UTC
Security Journalism
Security Journalism
From PowerShell to Payload: An Analysis of Weaponized Malware | Huntress
In this blog, we look at some malicious PowerShell code breadcrumbs that one hacker left behind to unravel how they maintained access during a cyberattack.
P0
2021-03-31 00:00 UTC
Security Journalism
Security Journalism
Top Takeaways from hack_it 2021 | Huntress
A recap of hack_it 2021, a virtual security training event packed with interactive exercises, malware analysis, hacking workshops and more.
P0
2021-03-09 00:00 UTC
Security Journalism
Security Journalism
Peeling Back the Layers of .NET Malware
Hackers always try to cover up their tracks. In this blog, we step through layers of obfuscation to uncover the real intent of a .NET malware sample.
P0
2021-02-09 00:00 UTC
Security Journalism
Security Journalism
Malware Deep Dive: Examining A PowerShell Payload | Huntress
To avoid detection, hackers often turn a system’s own tools against itself. Here, we examine a malicious payload that was executed using PowerShell.
P0
2021-01-12 00:00 UTC
Security Journalism
Security Journalism
Malware Under The Microscope: Manual Analysis
Learn manual malware analysis techniques used by threat researchers. Explore static & dynamic analysis, reverse engineering tools, and real-world investigation methods.
P0
2020-12-14 00:00 UTC
Security Journalism
Security Journalism
Supply Chain Exploitation of SolarWinds Orion Software | Huntress
Huntress covers the breaking news about Solarwinds’ Orion platform being exploited as part of a coordinated attack to distribute malware.
P0