Back to Home

Threat Intelligence

Cyber EspionageDPRKFraudInsider ThreatThreat Intelligence
From Laptops to Laundromats: How DPRK IT Workers Infiltrated the Global Remote Economy
This report maps the entire ecosystem of a DPRK IT worker infiltration scheme: key actors, GitHub aliases, laundering flows,...
CommunityDNSGenerative AIThreat Intelligence
Cybersecurity Reading List - Week of 2025-07-28
Commentary followed by links to cybersecurity articles that caught our interest internally.
Chinese MalwarecryptocurrencyThreat Intelligence
Chinese Malware Delivery Domains: Part III
This report details an ongoing campaign by an actor operating primarily during Chinese time zone working hours, targeting...
TOGEL138
CybercrimeDNSThreat Intelligence
Where Everybody Knows Your Name: Observing Malice-Complicit Nameservers
🎵 Sometimes you wanna goWhere everybody knows your nameAnd they’re always glad you came 🎵~Theme from Cheers Everyone...
DisinformationIranThreat Intelligence
Iran's Intelligence Group 13
Intelligence Group 13, embedded within the Shahid Kaveh Cyber Group, represents one of the most operationally aggressive...
DisinformationHacktivismMalwareThreat Intelligence
CyberAv3ngers: From Infrastructure Hacks to Propaganda Machines in the Iran-Israel Cyber War
As the conflict between Iran and Israel escalated in early 2025, it quickly expanded beyond missiles and airstrikes into...
AIMalwarePhishingRansomwareThreat Intelligence
Cybersecurity Reading List - Week of 2025-06-16
June arrives with more heat, everywhere, and not just regarding the weather. Law enforcement is counting up some recent disruption...
Skeleton Spider's Trusted Cloud Malware Delivery
CybercrimeMalwareThreat Intelligence
Eggs in a Cloudy Basket: Skeleton Spider’s Trusted Cloud Malware Delivery
FIN6 and Financially Motivated Cybercrime Skeleton Spider, also known as FIN6, is a long-running financially motivated cybercrime...
Mapping Hidden Alliances in Russian-Affiliated Ransomware
RansomwareThreat Intelligence
Mapping Hidden Alliances in Russian-Affiliated Ransomware
Understanding the landscape of cyber threats, particularly Russian-affiliated ransomware, is a complex and evolving challenge....
How Threat Actors Exploit Human Trust: A Breakdown of the 'Prove You Are Human' Malware Scheme
MalwareThreat Intelligence
How Threat Actors Exploit Human Trust: A Breakdown of the 'Prove You Are Human' Malware Scheme
This report details a malicious campaign that uses deceptive websites, including spoofed Gitcodes and fake Docusign verification...