labs
Kimsuky Evolves Reconnaissance Capabilities in New Global Campaign
DPRK-linked threat actor deploys previously unseen reconnaissance tool 'ReconShark' in wave of ongoing attacks.
Read More
DPRK-linked threat actor deploys previously unseen reconnaissance tool 'ReconShark' in wave of ongoing attacks.
SentinelLABS uncover a previously unknown set of espionage campaigns conducted by Winter Vivern advanced persistent threat (APT) group.
Learn how to track threat actor activity with this walkthrough of a known crimeware gang infecting cloud hosts through N-Days and brute forcing.
Threat actors target AWS login credentials with phishing websites and malverts returned in Google web searches.
Breaking Down the SEO Poisoning Attack: How Attackers Are Hijacking Search Results
In the name of Russia's war in Ukraine, NoName057(16) abuses GitHub and Telegram in an ongoing campaign to disrupt NATO's critical infrastructure.
Low-tech crimeware gang rotates its infrastructure and continues botnet expansion through poorly-configured cloud workloads.
The Void Balaur cyber mercenary group has thrived throughout 2022, attacking targets on a global scale with new phishing campaigns.
Low-level crimeware gang has been exploiting misconfigured and publicly accessible Docker and other cloud instances with roaring success.
Chinese-linked phishing campaign seeks to compromise Russian targets with custom malware designed for espionage.