The Latest Threat Research and Intelligence

Get the Latest Cybersecurity Research, Threat Intelligence, and AI Security Insights from SentinelLABS.

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

North Korean operators built a foothold on a DevOps engineer's Mac in a campaign whose job interview lures deliver malware via Terraform lock files.

Agents at Large | Tracing Illicit OpenAI Agent Activity on Hugging Face

Two Hugging Face accounts reveal that OpenAI's agents staged relay code, internal probes and ChatGPT account registration beyond the published timeline.

The Model Is the Malware | What Four Agentic Intrusions Tell Defenders

OpenAI, Anthropic and Meta disclosed agents reaching external systems. The tools didn't matter, and that changes the playbook for investigating intrusions.

Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis?

A real-world benchmark tests whether powerful AI models can keep an investigation trustworthy when new evidence invalidates their conclusions.

Crimeware
Antonio CocomazziNov 3, 2022
Black Basta Ransomware | Attacks Deploy Custom EDR Evasion Tools Tied to FIN7 Threat Actor
Advanced Persistent Threat
Joey ChenOct 12, 2022
WIP19 Espionage | New Chinese APT Targets IT Service Providers and Telcos With Signed Malware
Adversary
Tom HegelSep 22, 2022
Void Balaur | The Sprawling Infrastructure of a Careless Mercenary
Advanced Persistent Threat
Juan Andrés Guerrero-SaadeSep 22, 2022
The Mystery of Metador | An Unattributed Threat Hiding in Telcos, ISPs, and Universities
Crimeware
Aleksandar MilenkoskiSep 8, 2022
Crimeware Trends | Ransomware Developers Turn to Intermittent Encryption to Evade Detection
Crimeware
Amitai Ben Shushan EhrlichSep 1, 2022
PyPI Phishing Campaign | JuiceLedger Threat Actor Pivots From Fake Apps to Supply Chain Attacks
Crimeware
Aleksandar MilenkoskiAug 4, 2022
Who Needs Macros? | Threat Actors Pivot to Abusing Explorer and Other LOLBins via Windows Shortcuts
Crimeware
Jim WalterJul 21, 2022
LockBit 3.0 Update | Unpicking the Ransomware's Latest Anti-Analysis and Evasion Techniques
Security Research
Aleksandar MilenkoskiJul 14, 2022
Inside Malicious Windows Apps for Malware Deployment
Adversary
Tom HegelJul 7, 2022
Targets of Interest | Russian Organizations Increasingly Under Attack By Chinese APTs
Advanced Persistent Threat
Joey ChenJun 9, 2022
Aoqin Dragon | Newly-Discovered Chinese-linked APT Has Been Quietly Spying On Organizations For 10 Years
Security & Intelligence
Phil StokesMay 25, 2022
Use of Obfuscated Beacons in ‘pymafka’ Supply Chain Attack Signals a New Trend in macOS Attack TTPs

The Latest Threat Research and Intelligence

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

Agents at Large | Tracing Illicit OpenAI Agent Activity on Hugging Face

The Model Is the Malware | What Four Agentic Intrusions Tell Defenders

Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis?

All SentinelLABS Posts

Black Basta Ransomware | Attacks Deploy Custom EDR Evasion Tools Tied to FIN7 Threat Actor

WIP19 Espionage | New Chinese APT Targets IT Service Providers and Telcos With Signed Malware

Void Balaur | The Sprawling Infrastructure of a Careless Mercenary

The Mystery of Metador | An Unattributed Threat Hiding in Telcos, ISPs, and Universities

Crimeware Trends | Ransomware Developers Turn to Intermittent Encryption to Evade Detection

PyPI Phishing Campaign | JuiceLedger Threat Actor Pivots From Fake Apps to Supply Chain Attacks

Who Needs Macros? | Threat Actors Pivot to Abusing Explorer and Other LOLBins via Windows Shortcuts

LockBit 3.0 Update | Unpicking the Ransomware's Latest Anti-Analysis and Evasion Techniques

Inside Malicious Windows Apps for Malware Deployment

Targets of Interest | Russian Organizations Increasingly Under Attack By Chinese APTs

Aoqin Dragon | Newly-Discovered Chinese-linked APT Has Been Quietly Spying On Organizations For 10 Years

Use of Obfuscated Beacons in ‘pymafka’ Supply Chain Attack Signals a New Trend in macOS Attack TTPs