Technology ❯ Cybersecurity ❯ Threat Intelligence

Indicators of Compromise

YARA rules Malicious Domains Credential Management Huntress Reports Integration Tools Malicious Dependencies Malware Identification Rapid7 Malicious Software Huntress Research Attack Vectors Digital Forensics Fortinet Check Point Research Ransomware Malicious Payloads

5 ARTICLES

2w ago

TA4922 Targets UK, Germany, Italy and South Africa With New RATs and Loaders

Proofpoint warns the financially motivated group uses localized tax and HR phishing, abuses legitimate remote‑management tools, deploys possible AI‑assisted Python malware, resells stolen access

9 ARTICLES

last mo.

Check Point Details 'VoidLink,' a Cloud-Focused Linux Malware Framework With Modular Stealth

5 ARTICLES

6mo ago

Fortinet SSO Bypass Actively Exploited as CISA Sets Dec. 23 Fix Deadline

4 ARTICLES

6mo ago

New ShadowV2 Botnet Used AWS Outage for Test, Fortinet Warns of Lasting IoT Risk

4 ARTICLES

8mo ago

Google Details COLDRIVER’s New NOROBOT, YESROBOT, MAYBEROBOT Toolset After LOSTKEYS Exposure

7 ARTICLES

9mo ago

Malicious npm Packages Tap Ethereum Smart Contracts for Stealthy C2

6 ARTICLES

10mo ago

SonicWall Blames Patched CVE-2024-40766 for Akira Ransomware Attacks

Indicators of Compromise

TA4922 Targets UK, Germany, Italy and South Africa With New RATs and Loaders

DAEMON Tools Confirms Supply-Chain Breach, Releases Clean Lite 12.6

Axios npm Package Briefly Trojanized After Maintainer Account Takeover

eScan Update Server Breach Delivered Malicious Patch During Two-Hour Window

Fortinet FortiSIEM Flaw Under Active Exploitation After Public Exploit Release

Check Point Details 'VoidLink,' a Cloud-Focused Linux Malware Framework With Modular Stealth

Fortinet SSO Bypass Actively Exploited as CISA Sets Dec. 23 Fix Deadline

New ShadowV2 Botnet Used AWS Outage for Test, Fortinet Warns of Lasting IoT Risk

Google Details COLDRIVER’s New NOROBOT, YESROBOT, MAYBEROBOT Toolset After LOSTKEYS Exposure

Malicious npm Packages Tap Ethereum Smart Contracts for Stealthy C2

SonicWall Blames Patched CVE-2024-40766 for Akira Ransomware Attacks