ScarCruft | Attackers Gather Strategic Intelligence and Target Cybersecurity Professionals
New ScarCruft activity suggests the adversary is planning to target cybersecurity professionals and businesses.
Read More
LABScon Replay | Send Lawyers, ‘Garchs, and Money
From the Mueller report to the Steele Dossier, Liz Wharton explores the world of oligarch-funded lawyers and their attempts to discredit public research.
Read More
Exploring FBot | Python-Based Malware Targeting Cloud and Payment Services
FBot arms threat actors with a multi-function attack tool designed to hijack cloud, Saas and web services.
Read More
LABScon Replay | Spectre Strikes Again: Introducing the Firmware Edition
Binarly's CEO Alex Matrosov dives deep into the fascinating world of speculative attacks against System Management Mode (SMM) on AMD-based devices.
Read More
LABSCon Replay | Intellexa and Cytrox: From Fixer-Upper to Intel Agency Grade Spyware
Vitor Ventura breaks down the processes one spyware organization takes to develop fully working spyware using a one-click zero-day exploit.
Read More
Gaza Cybergang | Unified Front Targeting Hamas Opposition
Cluster of threat groups continues on trajectory to consolidate with shared victims, TTPs and evolving malware.
Read More
Sandman APT | China-Based Adversaries Embrace Lua
SentinelLABS, Microsoft, and PwC threat intelligence researchers provide attribution-relevant information on the Sandman APT cluster.
Read More
LABScon Replay | The Cyber Arm of China’s Soft Power: Reshaping a Continent
Tom Hegel explores China's influence in Africa and highlights an opportunity for broader understanding of global cyber threat landscapes.
Read More
Decoding the Past, Securing the Future | Enhancing Cyber Defense with Historical Threat Intelligence
Explore how revisiting past cyber incidents can empower defenders and help to anticipate future threats more effectively.
Read More
Elephant Hunting | Inside an Indian Hack-For-Hire Group
Exploring the technical intricacies of Appin, a hack-for-hire group, revealing confirmed attribution and global threat activity, both old and new.
Read More