corpus.blog
41554 blogs · [ { "id": "01a0ca8b-4baa-717b-85c5-e853847a557e", "title": "Cloud Atlas seen using a new tool in its attacks", "url": "https://securelist.com/cloud-atlas-attacks-with-new-backdoor-vbcloud/115103/", "published_at": "2024-12-23T10:00:46+00:00" }, { "id": "01a0ca8b-4baa-717b-85c5-e85385098613", "title": "BellaCPP: Discovering a new BellaCiao variant written in C++", "url": "https://securelist.com/bellacpp-cpp-version-of-bellaciao/115087/", "published_at": "2024-12-20T10:00:27+00:00" }, { "id": "01a0ca8b-4baa-717b-85c5-e8538522a3d6", "title": "Attackers exploiting a patched FortiClient EMS vulnerability in the wild", "url": "https://securelist.com/patched-forticlient-ems-vulnerability-exploited-in-the-wild/115046/", "published_at": "2024-12-19T12:00:20+00:00" }, { "id": "01a0ca8b-4baa-717b-85c5-e85385afa5a7", "title": "Lazarus group evolves its infection chain with old and new malware", "url": "https://securelist.com/lazarus-new-malware/115059/", "published_at": "2024-12-19T10:00:55+00:00" }, { "id": "01a0ca8b-4baa-717b-85c5-e8538677a9bd", "title": "Analysis of Cyber Anarchy Squad attacks targeting Russian and Belarusian organizations", "url": "https://securelist.com/cyber-anarchy-squad-attacks-with-uncommon-trojans/114990/", "published_at": "2024-12-18T10:00:03+00:00" }, { "id": "01a0ca8b-4baa-717b-85c5-e853870eae45", "title": "Download a banker to track your parcel", "url": "https://securelist.com/mamont-banker-disguised-as-parcel-tracking-app/115006/", "published_at": "2024-12-17T08:21:36+00:00" }, { "id": "01a0ca8b-4baa-717b-85c5-e85387aafa87", "title": "Dark web threats and dark market predictions for 2025", "url": "https://securelist.com/ksb-dark-web-predictions-2025/114966/", "published_at": "2024-12-16T10:00:27+00:00" }, { "id": "01a0ca8b-796a-70b7-8b35-c76a5bc88e87", "title": "Careto is back: what’s new after 10 years of silence?", "url": "https://securelist.com/careto-is-back/114942/", "published_at": "2024-12-12T10:00:16+00:00" }, { "id": "01a0ca8b-796a-70b7-8b35-c76a5c24a715", "title": "Story of the Year: global IT outages and supply chain attacks", "url": "https://securelist.com/ksb-story-of-the-year-2024/114883/", "published_at": "2024-12-09T10:00:52+00:00" }, { "id": "01a0ca8b-796a-70b7-8b35-c76a5ced2390", "title": "Exploits and vulnerabilities in Q3 2024", "url": "https://securelist.com/exploits-and-vulnerabilities-q3-2024/114839/", "published_at": "2024-12-06T10:00:20+00:00" }, { "id": "01a0ca8b-796a-70b7-8b35-c76a5d05fc43", "title": "Our secret ingredient for reverse engineering", "url": "https://securelist.com/hrtng-ida-pro-plugin/114780/", "published_at": "2024-12-05T10:00:52+00:00" }, { "id": "01a0ca8b-796a-70b7-8b35-c76a5d7b18a9", "title": "Kaspersky Security Bulletin 2024. Statistics", "url": "https://securelist.com/ksb-2024-statistics/114795/", "published_at": "2024-12-04T10:00:37+00:00" }, { "id": "01a0ca8b-796a-70b7-8b35-c76a5d8b82f0", "title": "Horns&Hooves campaign delivers NetSupport RAT and BurnsRAT", "url": "https://securelist.com/horns-n-hooves-campaign-delivering-netsupport-rat/114740/", "published_at": "2024-12-02T10:00:25+00:00" }, { "id": "01a0ca8b-796a-70b7-8b35-c76a5dfc1718", "title": "IT threat evolution in Q3 2024. Non-mobile statistics", "url": "https://securelist.com/malware-report-q3-2024-non-mobile-statistics/114695/", "published_at": "2024-11-29T10:00:59+00:00" }, { "id": "01a0ca8b-796a-70b7-8b35-c76a5e9daa76", "title": "IT threat evolution in Q3 2024. Mobile statistics", "url": "https://securelist.com/malware-report-q3-2024-mobile-statistics/114692/", "published_at": "2024-11-29T10:00:38+00:00" }, { "id": "01a0ca8b-796a-70b7-8b35-c76a5ed96270", "title": "IT threat evolution Q3 2024", "url": "https://securelist.com/malware-report-q3-2024/114678/", "published_at": "2024-11-29T10:00:33+00:00" }, { "id": "01a0ca8b-796a-70b7-8b35-c76a5f578fac", "title": "APT trends report Q3 2024", "url": "https://securelist.com/apt-report-q3-2024/114623/", "published_at": "2024-11-28T10:00:13+00:00" }, { "id": "01a0ca8b-97a6-7176-b916-5f26e33f7230", "title": "Consumer and privacy predictions for 2025", "url": "https://securelist.com/ksb-consumer-and-privacy-predictions-2025/114620/", "published_at": "2024-11-27T10:00:26+00:00" }, { "id": "01a0ca8b-97a6-7176-b916-5f26e346f670", "title": "Analysis of Elpaco: a Mimic variant", "url": "https://securelist.com/elpaco-ransomware-a-mimic-variant/114635/", "published_at": "2024-11-26T10:00:57+00:00" }, { "id": "01a0ca8b-97a6-7176-b916-5f26e3ee6f41", "title": "Advanced threat predictions for 2025", "url": "https://securelist.com/ksb-apt-predictions-2025/114582/", "published_at": "2024-11-25T10:00:25+00:00" }, { "id": "01a0ca8b-97a6-7176-b916-5f26e4d32c37", "title": "Scammer Black Friday offers: Online shopping threats and dark web sales", "url": "https://securelist.com/black-friday-report-2024/114589/", "published_at": "2024-11-19T10:00:00+00:00" }, { "id": "01a0ca8b-97a6-7176-b916-5f26e521490f", "title": "Сrimeware and financial cyberthreats in 2025", "url": "https://securelist.com/ksb-financial-and-crimeware-predictions-2025/114565/", "published_at": "2024-11-14T09:00:26+00:00" }, { "id": "01a0ca8b-97a6-7176-b916-5f26e5ec9f54", "title": "Threats in space (or rather, on Earth): internet-exposed GNSS receivers", "url": "https://securelist.com/internet-exposed-gnss-receivers-in-2024/114548/", "published_at": "2024-11-13T10:00:14+00:00" }, { "id": "01a0ca8b-97a6-7176-b916-5f26e689b5a5", "title": "Ymir: new stealthy ransomware in the wild", "url": "https://securelist.com/new-ymir-ransomware-found-in-colombia/114493/", "published_at": "2024-11-11T10:00:57+00:00" }, { "id": "01a0ca8b-97a6-7176-b916-5f26e68fd7e1", "title": "QSC: A multi-plugin framework used by CloudComputating group in cyberespionage campaigns", "url": "https://securelist.com/cloudcomputating-qsc-framework/114438/", "published_at": "2024-11-08T10:00:15+00:00" }, { "id": "01a0ca8b-97a6-7176-b916-5f26e69bd032", "title": "New SteelFox Trojan mimics software activators, stealing sensitive data and mining cryptocurrency", "url": "https://securelist.com/steelfox-trojan-drops-stealer-and-miner/114414/", "published_at": "2024-11-06T10:00:40+00:00" }, { "id": "01a0ca8b-97a6-7176-b916-5f26e7479004", "title": "Loose-lipped neural networks and lazy scammers", "url": "https://securelist.com/llm-phish-blunders/114367/", "published_at": "2024-10-31T10:00:27+00:00" }, { "id": "01a0ca8b-bf78-7320-a7ac-6d521b9a108a", "title": "Risk reduction redefined: How compromise assessment helps strengthen cyberdefenses", "url": "https://securelist.com/compromise-assessment-cases/114332/", "published_at": "2024-10-29T14:00:40+00:00" }, { "id": "01a0ca8b-bf78-7320-a7ac-6d521bb6eb64", "title": "Lumma/Amadey: fake CAPTCHAs want to know if you’re human", "url": "https://securelist.com/fake-captcha-delivers-lumma-amadey/114312/", "published_at": "2024-10-29T10:00:31+00:00" }, { "id": "01a0ca8b-bf78-7320-a7ac-6d521c4e9668", "title": "The Crypto Game of Lazarus APT: Investors vs. Zero-days", "url": "https://securelist.com/lazarus-apt-steals-crypto-with-a-tank-game/114282/", "published_at": "2024-10-23T11:00:48+00:00" }, { "id": "01a0ca8b-bf78-7320-a7ac-6d521d420f43", "title": "Grandoreiro, the global trojan with grandiose goals", "url": "https://securelist.com/grandoreiro-banking-trojan/114257/", "published_at": "2024-10-22T18:00:17+00:00" }, { "id": "01a0ca8b-bf78-7320-a7ac-6d521da2f9c3", "title": "Stealer here, stealer there, stealers everywhere!", "url": "https://securelist.com/kral-amos-vidar-acr-stealers/114237/", "published_at": "2024-10-21T10:00:47+00:00" }, { "id": "01a0ca8b-bf78-7320-a7ac-6d521dde5363", "title": "Analysis of the Crypt Ghouls group: continuing the investigation into a series of attacks on Russia", "url": "https://securelist.com/crypt-ghouls-hacktivists-tools-overlap-analysis/114217/", "published_at": "2024-10-18T10:00:47+00:00" }, { "id": "01a0ca8b-bf78-7320-a7ac-6d521e242f4f", "title": "SAS CTF and the many ways to persist a kernel shellcode on Windows 7", "url": "https://securelist.com/sas-ctf-windows-7-challenge-explained/114180/", "published_at": "2024-10-17T10:00:17+00:00" }, { "id": "01a0ca8b-bf78-7320-a7ac-6d521ebccaf2", "title": "Beyond the Surface: the evolution and expansion of the SideWinder APT group", "url": "https://securelist.com/sidewinder-apt/114089/", "published_at": "2024-10-15T10:00:54+00:00" }, { "id": "01a0ca8b-bf78-7320-a7ac-6d521f10ef1f", "title": "Whispers from the Dark Web Cave. Cyberthreats in the Middle East", "url": "https://securelist.com/meta-threat-landscape-h1-2024/114164/", "published_at": "2024-10-14T07:00:56+00:00" }, { "id": "01a0ca8b-bf78-7320-a7ac-6d521f945f52", "title": "Awaken Likho is awake: new techniques of an APT group", "url": "https://securelist.com/awaken-likho-apt-new-implant-campaign/114101/", "published_at": "2024-10-07T10:00:14+00:00" }, { "id": "01a0ca8b-fab7-70d5-965f-a6a239e51bfd", "title": "Scam Information and Event Management", "url": "https://securelist.com/miner-campaign-misuses-open-source-siem-agent/114022/", "published_at": "2024-10-04T08:00:48+00:00" }, { "id": "01a0ca8b-fab7-70d5-965f-a6a23ad00419", "title": "Finding a needle in a haystack: Machine learning at the forefront of threat hunting research", "url": "https://securelist.com/machine-learning-in-threat-hunting/114016/", "published_at": "2024-10-02T10:00:37+00:00" }, { "id": "01a0ca8b-fab7-70d5-965f-a6a23b190480", "title": "Key Group: another ransomware group using leaked builders", "url": "https://securelist.com/key-group-ransomware-samples-and-telegram-schemes/114025/", "published_at": "2024-10-01T10:00:24+00:00" }, { "id": "01a0ca8b-fab7-70d5-965f-a6a23bc2b5f2", "title": "Threat landscape for industrial automation systems, Q2 2024", "url": "https://securelist.com/industrial-threat-landscape-q2-2024/113981/", "published_at": "2024-09-26T08:00:48+00:00" }, { "id": "01a0ca8b-fab7-70d5-965f-a6a23bd0df17", "title": "From 12 to 21: how we discovered connections between the Twelve and BlackJack groups", "url": "https://securelist.com/blackjack-hacktivists-connection-with-twelve/113959/", "published_at": "2024-09-25T10:00:19+00:00" }, { "id": "01a0ca8b-fab7-70d5-965f-a6a23bdf6f31", "title": "Web tracking report: who monitored users’ online activities in 2023–2024 the most", "url": "https://securelist.com/web-trackers-report-2023-2024/113778/", "published_at": "2024-09-24T10:00:19+00:00" }, { "id": "01a0ca8b-fab7-70d5-965f-a6a23bf9e7c2", "title": "How the Necro Trojan infiltrated Google Play, again", "url": "https://securelist.com/necro-trojan-is-back-on-google-play/113881/", "published_at": "2024-09-23T10:00:56+00:00" }, { "id": "01a0ca8b-fab7-70d5-965f-a6a23c06f48d", "title": "-=TWELVE=- is back", "url": "https://securelist.com/twelve-group-unified-kill-chain/113877/", "published_at": "2024-09-20T12:31:34+00:00" }, { "id": "01a0ca8b-fab7-70d5-965f-a6a23c989e92", "title": "Exotic SambaSpy is now dancing with Italian users", "url": "https://securelist.com/sambaspy-rat-targets-italian-users/113851/", "published_at": "2024-09-18T10:00:47+00:00" }, { "id": "01a0ca8b-fab7-70d5-965f-a6a23cb5c85f", "title": "Loki: a new private agent for the popular Mythic framework", "url": "https://securelist.com/loki-agent-for-mythic/113596/", "published_at": "2024-09-09T07:00:38+00:00" }, { "id": "01a0ca8c-3045-71c2-b60f-693bed63ebbc", "title": "Tropic Trooper spies on government entities in the Middle East", "url": "https://securelist.com/new-tropic-trooper-web-shell-infection/113737/", "published_at": "2024-09-05T08:00:12+00:00" }, { "id": "01a0ca8c-3045-71c2-b60f-693beddf9508", "title": "Mallox ransomware: in-depth analysis and evolution", "url": "https://securelist.com/mallox-ransomware/113529/", "published_at": "2024-09-04T10:00:02+00:00" }, { "id": "01a0ca8c-3045-71c2-b60f-693bee8fd3a5", "title": "A deep dive into the most interesting incident response cases of last year", "url": "https://securelist.com/incident-response-interesting-cases-2023/113611/", "published_at": "2024-09-03T11:00:24+00:00" }, { "id": "01a0ca8c-3045-71c2-b60f-693bef3b9811", "title": "IT threat evolution in Q2 2024. Non-mobile statistics", "url": "https://securelist.com/it-threat-evolution-q2-2024-pc-statistics/113683/", "published_at": "2024-09-03T08:00:47+00:00" }, { "id": "01a0ca8c-3045-71c2-b60f-693befce12d3", "title": "IT threat evolution in Q2 2024. Mobile statistics", "url": "https://securelist.com/it-threat-evolution-q2-2024-mobile-statistics/113678/", "published_at": "2024-09-03T08:00:46+00:00" }, { "id": "01a0ca8c-3045-71c2-b60f-693bf0950f0e", "title": "IT threat evolution Q2 2024", "url": "https://securelist.com/it-threat-evolution-q2-2024/113669/", "published_at": "2024-09-03T08:00:08+00:00" }, { "id": "01a0ca8c-3045-71c2-b60f-693bf110d7c2", "title": "Head Mare: adventures of a unicorn in Russia and Belarus", "url": "https://securelist.com/head-mare-hacktivists/113555/", "published_at": "2024-09-02T10:00:22+00:00" }, { "id": "01a0ca8c-3045-71c2-b60f-693bf12282ac", "title": "HZ Rat backdoor for macOS attacks users of China’s DingTalk and WeChat", "url": "https://securelist.com/hz-rat-attacks-wechat-and-dingtalk/113513/", "published_at": "2024-08-27T10:00:43+00:00" }, { "id": "01a0ca8c-3045-71c2-b60f-693bf1c9c195", "title": "Memory corruption vulnerabilities in Suricata and FreeRDP", "url": "https://securelist.com/suricata-freerdp-memory-corruption/113489/", "published_at": "2024-08-22T10:00:34+00:00" }, { "id": "01a0ca8c-3045-71c2-b60f-693bf207aed1", "title": "Exploits and vulnerabilities in Q2 2024", "url": "https://securelist.com/vulnerability-exploit-report-q2-2024/113455/", "published_at": "2024-08-21T10:00:10+00:00" }, { "id": "01a0ca8c-5818-702e-a631-4a3dd1f83712", "title": "Approach to mainframe penetration testing on z/OS", "url": "https://securelist.com/zos-mainframe-pentesting/113427/", "published_at": "2024-08-20T12:00:07+00:00" }, { "id": "01a0ca8c-5818-702e-a631-4a3dd2bd639c", "title": "BlindEagle flying high in Latin America", "url": "https://securelist.com/blindeagle-apt/113414/", "published_at": "2024-08-19T10:00:06+00:00" }, { "id": "01a0ca8c-5818-702e-a631-4a3dd3b46f4c", "title": "Tusk: unraveling a complex infostealer campaign", "url": "https://securelist.com/tusk-infostealers-campaign/113367/", "published_at": "2024-08-15T12:00:20+00:00" }, { "id": "01a0ca8c-5818-702e-a631-4a3dd451c434", "title": "EastWind campaign: new CloudSorcerer attacks on government organizations in Russia", "url": "https://securelist.com/eastwind-apt-campaign/113345/", "published_at": "2024-08-14T12:00:57+00:00" }, { "id": "01a0ca8c-5818-702e-a631-4a3dd49b744c", "title": "APT trends report Q2 2024", "url": "https://securelist.com/apt-trends-report-q2-2024/113275/", "published_at": "2024-08-13T12:00:28+00:00" }, { "id": "01a0ca8c-5818-702e-a631-4a3dd56f6228", "title": "Indirect prompt injection in the real world: how people manipulate neural networks", "url": "https://securelist.com/indirect-prompt-injection-in-the-wild/113295/", "published_at": "2024-08-12T10:00:01+00:00" }, { "id": "01a0ca8c-5818-702e-a631-4a3dd5dc5682", "title": "LianSpy: new Android spyware targeting Russian users", "url": "https://securelist.com/lianspy-android-spyware/113253/", "published_at": "2024-08-05T09:40:28+00:00" }, { "id": "01a0ca8c-5818-702e-a631-4a3dd6064412", "title": "How “professional” ransomware variants boost cybercrime groups", "url": "https://securelist.com/sexi-key-group-mallox-ransomware/113183/", "published_at": "2024-08-01T10:00:17+00:00" }, { "id": "01a0ca8c-5818-702e-a631-4a3dd64093b3", "title": "Mandrake spyware sneaks onto Google Play again, flying under the radar for two years", "url": "https://securelist.com/mandrake-apps-return-to-google-play/113147/", "published_at": "2024-07-29T10:00:05+00:00" }, { "id": "01a0ca8c-5818-702e-a631-4a3dd69f6111", "title": "When spear phishing met mass phishing", "url": "https://securelist.com/spear-phishing-meets-mass/113125/", "published_at": "2024-07-11T10:00:26+00:00" }, { "id": "01a0ca8c-846f-70ca-a631-bd11b7b74c95", "title": "Developing and prioritizing a detection engineering backlog based on MITRE ATT&CK", "url": "https://securelist.com/detection-engineering-backlog-prioritization/113099/", "published_at": "2024-07-09T13:00:25+00:00" }, { "id": "01a0ca8c-846f-70ca-a631-bd11b8868dfd", "title": "CloudSorcerer – A new APT targeting Russian government entities", "url": "https://securelist.com/cloudsorcerer-new-apt-cloud-actor/113056/", "published_at": "2024-07-08T07:00:33+00:00" }, { "id": "01a0ca8c-846f-70ca-a631-bd11b888fc8f", "title": "Cybersecurity in the SMB space — a growing threat", "url": "https://securelist.com/smb-threat-report-2024/113010/", "published_at": "2024-06-25T10:00:39+00:00" }, { "id": "01a0ca8c-846f-70ca-a631-bd11b8d13ae6", "title": "XZ backdoor: Hook analysis", "url": "https://securelist.com/xz-backdoor-part-3-hooking-ssh/113007/", "published_at": "2024-06-24T10:00:02+00:00" }, { "id": "01a0ca8c-846f-70ca-a631-bd11b9469462", "title": "Analysis of user password strength", "url": "https://securelist.com/password-brute-force-time/112984/", "published_at": "2024-06-18T11:30:32+00:00" }, { "id": "01a0ca8c-846f-70ca-a631-bd11ba021fb0", "title": "Cinterion EHS5 3G UMTS/HSPA Module Research", "url": "https://securelist.com/telit-cinterion-modem-vulnerabilities/112915/", "published_at": "2024-06-13T10:00:22+00:00" }, { "id": "01a0ca8c-846f-70ca-a631-bd11bad15251", "title": "QR code SQL injection and other vulnerabilities in a popular biometric terminal", "url": "https://securelist.com/biometric-terminal-vulnerabilities/112800/", "published_at": "2024-06-11T08:00:01+00:00" }, { "id": "01a0ca8c-846f-70ca-a631-bd11bbb582b8", "title": "Bypassing 2FA with phishing and OTP bots", "url": "https://securelist.com/2fa-phishing/112805/", "published_at": "2024-06-10T10:00:04+00:00" }, { "id": "01a0ca8c-846f-70ca-a631-bd11bbcf9506", "title": "IT threat evolution in Q1 2024. Mobile statistics", "url": "https://securelist.com/it-threat-evolution-q1-2024-mobile-statistics/112750/", "published_at": "2024-06-03T10:00:46+00:00" }, { "id": "01a0ca8c-846f-70ca-a631-bd11bc2f3917", "title": "IT threat evolution Q1 2024", "url": "https://securelist.com/it-threat-evolution-q1-2024/112742/", "published_at": "2024-06-03T10:00:27+00:00" }, { "id": "01a0ca8c-bf97-72bc-ae38-d92d197a4f6b", "title": "IT threat evolution in Q1 2024. Non-mobile statistics", "url": "https://securelist.com/it-threat-evolution-q1-2024-pc-statistics/112754/", "published_at": "2024-06-03T10:00:08+00:00" }, { "id": "01a0ca8c-bf97-72bc-ae38-d92d199d7732", "title": "Trusted relationship attacks: trust, but verify", "url": "https://securelist.com/trusted-relationship-attack/112731/", "published_at": "2024-05-28T10:00:06+00:00" }, { "id": "01a0ca8c-bf97-72bc-ae38-d92d19eeea84", "title": "Message board scams", "url": "https://securelist.com/message-board-scam/112691/", "published_at": "2024-05-27T13:00:40+00:00" }, { "id": "01a0ca8c-bf97-72bc-ae38-d92d1a3c149a", "title": "Threat landscape for industrial automation systems, Q1 2024", "url": "https://securelist.com/industrial-threat-landscape-q1-2024/112683/", "published_at": "2024-05-27T10:00:04+00:00" }, { "id": "01a0ca8c-bf97-72bc-ae38-d92d1ac8a9f4", "title": "ShrinkLocker: Turning BitLocker into ransomware", "url": "https://securelist.com/ransomware-abuses-bitlocker/112643/", "published_at": "2024-05-23T12:00:39+00:00" }, { "id": "01a0ca8c-bf97-72bc-ae38-d92d1ad89b0f", "title": "A journey into forgotten Null Session and MS-RPC interfaces", "url": "https://securelist.com/no-auth-domain-information-enumeration/112629/", "published_at": "2024-05-23T09:00:15+00:00" }, { "id": "01a0ca8c-bf97-72bc-ae38-d92d1b9490a0", "title": "Stealers, stealers and more stealers", "url": "https://securelist.com/crimeware-report-stealers/112633/", "published_at": "2024-05-22T10:00:01+00:00" }, { "id": "01a0ca8c-bf97-72bc-ae38-d92d1b995687", "title": "QakBot attacks with Windows zero-day (CVE-2024-30051)", "url": "https://securelist.com/cve-2024-30051/112618/", "published_at": "2024-05-14T17:14:38+00:00" }, { "id": "01a0ca8c-bf97-72bc-ae38-d92d1c4313dc", "title": "Incident response analyst report 2023", "url": "https://securelist.com/kaspersky-incident-response-report-2023/112504/", "published_at": "2024-05-14T11:00:59+00:00" }, { "id": "01a0ca8c-bf97-72bc-ae38-d92d1c8992c3", "title": "APT trends report Q1 2024", "url": "https://securelist.com/apt-trends-report-q1-2024/112473/", "published_at": "2024-05-09T10:00:28+00:00" }, { "id": "01a0ca8c-ec4a-71c3-8136-6a3414de8071", "title": "State of ransomware in 2024", "url": "https://securelist.com/state-of-ransomware-2023/112590/", "published_at": "2024-05-08T10:00:40+00:00" }, { "id": "01a0ca8c-ec4a-71c3-8136-6a3414f43a33", "title": "Exploits and vulnerabilities in Q1 2024", "url": "https://securelist.com/vulnerability-report-q1-2024/112554/", "published_at": "2024-05-07T10:00:39+00:00" }, { "id": "01a0ca8c-ec4a-71c3-8136-6a341527c634", "title": "Financial cyberthreats in 2023", "url": "https://securelist.com/financial-threat-report-2023/112526/", "published_at": "2024-05-06T10:00:31+00:00" }, { "id": "01a0ca8c-ec4a-71c3-8136-6a341548570d", "title": "Managed Detection and Response in 2023", "url": "https://securelist.com/kaspersky-mdr-report-2023/112411/", "published_at": "2024-04-30T09:00:40+00:00" }, { "id": "01a0ca8c-ec4a-71c3-8136-6a3415ca369a", "title": "Assessing the Y, and How, of the XZ Utils incident", "url": "https://securelist.com/xz-backdoor-story-part-2-social-engineering/112476/", "published_at": "2024-04-24T10:10:31+00:00" }, { "id": "01a0ca8c-ec4a-71c3-8136-6a3416b8cc6a", "title": "ToddyCat is making holes in your infrastructure", "url": "https://securelist.com/toddycat-traffic-tunneling-data-extraction-tools/112443/", "published_at": "2024-04-22T10:00:00+00:00" }, { "id": "01a0ca8c-ec4a-71c3-8136-6a3416d7d1c4", "title": "DuneQuixote campaign targets Middle Eastern entities with “CR4T” malware", "url": "https://securelist.com/dunequixote/112425/", "published_at": "2024-04-18T10:00:07+00:00" }, { "id": "01a0ca8c-ec4a-71c3-8136-6a34179a3787", "title": "SoumniBot: the new Android banker’s unique techniques", "url": "https://securelist.com/soumnibot-android-banker-obfuscates-app-manifest/112334/", "published_at": "2024-04-17T10:00:28+00:00" }, { "id": "01a0ca8c-ec4a-71c3-8136-6a3418274dd4", "title": "Using the LockBit builder to generate targeted ransomware", "url": "https://securelist.com/lockbit-3-0-based-custom-targeted-ransomware/112375/", "published_at": "2024-04-15T10:00:28+00:00" }, { "id": "01a0ca8c-ec4a-71c3-8136-6a3418e22497", "title": "XZ backdoor story – Initial analysis", "url": "https://securelist.com/xz-backdoor-story-part-1/112354/", "published_at": "2024-04-12T08:00:34+00:00" }, { "id": "01a0ca8d-16df-7297-ae6c-077c53539875", "title": "DinodasRAT Linux implant targeting entities worldwide", "url": "https://securelist.com/dinodasrat-linux-implant/112284/", "published_at": "2024-03-28T13:00:51+00:00" }, { "id": "01a0ca8d-16df-7297-ae6c-077c5424f992", "title": "Android malware, Android malware and more Android malware", "url": "https://securelist.com/crimeware-report-android-malware/112121/", "published_at": "2024-03-20T11:00:34+00:00" }, { "id": "01a0ca8d-16df-7297-ae6c-077c54da7e0c", "title": "Threat landscape for industrial automation systems. H2 2023", "url": "https://securelist.com/threat-landscape-for-industrial-automation-systems-h2-2023/112153/", "published_at": "2024-03-19T10:00:20+00:00" } ] posts Claim your blog
Back to Kaspersky Securelist
Blog · corpus.blog/blogs/securelist.com/posts

Kaspersky Securelist

securelist.com

2024

Cloud Atlas seen using a new tool in its attacksoriginal ↗
23 Dec 2024
BellaCPP: Discovering a new BellaCiao variant written in C++original ↗
20 Dec 2024
Attackers exploiting a patched FortiClient EMS vulnerability in the wildoriginal ↗
19 Dec 2024
Lazarus group evolves its infection chain with old and new malwareoriginal ↗
19 Dec 2024
Analysis of Cyber Anarchy Squad attacks targeting Russian and Belarusian organizationsoriginal ↗
18 Dec 2024
Download a banker to track your parceloriginal ↗
17 Dec 2024
Dark web threats and dark market predictions for 2025original ↗
16 Dec 2024
Careto is back: what’s new after 10 years of silence?original ↗
12 Dec 2024
Story of the Year: global IT outages and supply chain attacksoriginal ↗
9 Dec 2024
Exploits and vulnerabilities in Q3 2024original ↗
6 Dec 2024
Our secret ingredient for reverse engineeringoriginal ↗
5 Dec 2024
Kaspersky Security Bulletin 2024. Statisticsoriginal ↗
4 Dec 2024
Horns&Hooves campaign delivers NetSupport RAT and BurnsRAToriginal ↗
2 Dec 2024
IT threat evolution in Q3 2024. Non-mobile statisticsoriginal ↗
29 Nov 2024
IT threat evolution in Q3 2024. Mobile statisticsoriginal ↗
29 Nov 2024
IT threat evolution Q3 2024original ↗
29 Nov 2024
APT trends report Q3 2024original ↗
28 Nov 2024
Consumer and privacy predictions for 2025original ↗
27 Nov 2024
Analysis of Elpaco: a Mimic variantoriginal ↗
26 Nov 2024
Advanced threat predictions for 2025original ↗
25 Nov 2024
Scammer Black Friday offers: Online shopping threats and dark web salesoriginal ↗
19 Nov 2024
Сrimeware and financial cyberthreats in 2025original ↗
14 Nov 2024
Threats in space (or rather, on Earth): internet-exposed GNSS receiversoriginal ↗
13 Nov 2024
Ymir: new stealthy ransomware in the wildoriginal ↗
11 Nov 2024
QSC: A multi-plugin framework used by CloudComputating group in cyberespionage campaignsoriginal ↗
8 Nov 2024
New SteelFox Trojan mimics software activators, stealing sensitive data and mining cryptocurrencyoriginal ↗
6 Nov 2024
Loose-lipped neural networks and lazy scammersoriginal ↗
31 Oct 2024
Risk reduction redefined: How compromise assessment helps strengthen cyberdefensesoriginal ↗
29 Oct 2024
Lumma/Amadey: fake CAPTCHAs want to know if you’re humanoriginal ↗
29 Oct 2024
The Crypto Game of Lazarus APT: Investors vs. Zero-daysoriginal ↗
23 Oct 2024
Grandoreiro, the global trojan with grandiose goalsoriginal ↗
22 Oct 2024
Stealer here, stealer there, stealers everywhere!original ↗
21 Oct 2024
Analysis of the Crypt Ghouls group: continuing the investigation into a series of attacks on Russiaoriginal ↗
18 Oct 2024
SAS CTF and the many ways to persist a kernel shellcode on Windows 7original ↗
17 Oct 2024
Beyond the Surface: the evolution and expansion of the SideWinder APT grouporiginal ↗
15 Oct 2024
Whispers from the Dark Web Cave. Cyberthreats in the Middle Eastoriginal ↗
14 Oct 2024
Awaken Likho is awake: new techniques of an APT grouporiginal ↗
7 Oct 2024
Scam Information and Event Managementoriginal ↗
4 Oct 2024
Finding a needle in a haystack: Machine learning at the forefront of threat hunting researchoriginal ↗
2 Oct 2024
Key Group: another ransomware group using leaked buildersoriginal ↗
1 Oct 2024
Threat landscape for industrial automation systems, Q2 2024original ↗
26 Sept 2024
From 12 to 21: how we discovered connections between the Twelve and BlackJack groupsoriginal ↗
25 Sept 2024
Web tracking report: who monitored users’ online activities in 2023–2024 the mostoriginal ↗
24 Sept 2024
How the Necro Trojan infiltrated Google Play, againoriginal ↗
23 Sept 2024
-=TWELVE=- is backoriginal ↗
20 Sept 2024
Exotic SambaSpy is now dancing with Italian usersoriginal ↗
18 Sept 2024
Loki: a new private agent for the popular Mythic frameworkoriginal ↗
9 Sept 2024
Tropic Trooper spies on government entities in the Middle Eastoriginal ↗
5 Sept 2024
Mallox ransomware: in-depth analysis and evolutionoriginal ↗
4 Sept 2024
A deep dive into the most interesting incident response cases of last yearoriginal ↗
3 Sept 2024
IT threat evolution in Q2 2024. Non-mobile statisticsoriginal ↗
3 Sept 2024
IT threat evolution in Q2 2024. Mobile statisticsoriginal ↗
3 Sept 2024
IT threat evolution Q2 2024original ↗
3 Sept 2024
Head Mare: adventures of a unicorn in Russia and Belarusoriginal ↗
2 Sept 2024
HZ Rat backdoor for macOS attacks users of China’s DingTalk and WeChatoriginal ↗
27 Aug 2024
Memory corruption vulnerabilities in Suricata and FreeRDPoriginal ↗
22 Aug 2024
Exploits and vulnerabilities in Q2 2024original ↗
21 Aug 2024
Approach to mainframe penetration testing on z/OSoriginal ↗
20 Aug 2024
BlindEagle flying high in Latin Americaoriginal ↗
19 Aug 2024
Tusk: unraveling a complex infostealer campaignoriginal ↗
15 Aug 2024
EastWind campaign: new CloudSorcerer attacks on government organizations in Russiaoriginal ↗
14 Aug 2024
APT trends report Q2 2024original ↗
13 Aug 2024
Indirect prompt injection in the real world: how people manipulate neural networksoriginal ↗
12 Aug 2024
LianSpy: new Android spyware targeting Russian usersoriginal ↗
5 Aug 2024
How “professional” ransomware variants boost cybercrime groupsoriginal ↗
1 Aug 2024
Mandrake spyware sneaks onto Google Play again, flying under the radar for two yearsoriginal ↗
29 Jul 2024
When spear phishing met mass phishingoriginal ↗
11 Jul 2024
Developing and prioritizing a detection engineering backlog based on MITRE ATT&CKoriginal ↗
9 Jul 2024
CloudSorcerer – A new APT targeting Russian government entitiesoriginal ↗
8 Jul 2024
Cybersecurity in the SMB space — a growing threatoriginal ↗
25 Jun 2024
XZ backdoor: Hook analysisoriginal ↗
24 Jun 2024
Analysis of user password strengthoriginal ↗
18 Jun 2024
Cinterion EHS5 3G UMTS/HSPA Module Researchoriginal ↗
13 Jun 2024
QR code SQL injection and other vulnerabilities in a popular biometric terminaloriginal ↗
11 Jun 2024
Bypassing 2FA with phishing and OTP botsoriginal ↗
10 Jun 2024
IT threat evolution in Q1 2024. Mobile statisticsoriginal ↗
3 Jun 2024
IT threat evolution Q1 2024original ↗
3 Jun 2024
IT threat evolution in Q1 2024. Non-mobile statisticsoriginal ↗
3 Jun 2024
Trusted relationship attacks: trust, but verifyoriginal ↗
28 May 2024
Message board scamsoriginal ↗
27 May 2024
Threat landscape for industrial automation systems, Q1 2024original ↗
27 May 2024
ShrinkLocker: Turning BitLocker into ransomwareoriginal ↗
23 May 2024
A journey into forgotten Null Session and MS-RPC interfacesoriginal ↗
23 May 2024
Stealers, stealers and more stealersoriginal ↗
22 May 2024
QakBot attacks with Windows zero-day (CVE-2024-30051)original ↗
14 May 2024
Incident response analyst report 2023original ↗
14 May 2024
APT trends report Q1 2024original ↗
9 May 2024
State of ransomware in 2024original ↗
8 May 2024
Exploits and vulnerabilities in Q1 2024original ↗
7 May 2024
Financial cyberthreats in 2023original ↗
6 May 2024
Managed Detection and Response in 2023original ↗
30 Apr 2024
Assessing the Y, and How, of the XZ Utils incidentoriginal ↗
24 Apr 2024
ToddyCat is making holes in your infrastructureoriginal ↗
22 Apr 2024
DuneQuixote campaign targets Middle Eastern entities with “CR4T” malwareoriginal ↗
18 Apr 2024
SoumniBot: the new Android banker’s unique techniquesoriginal ↗
17 Apr 2024
Using the LockBit builder to generate targeted ransomwareoriginal ↗
15 Apr 2024
XZ backdoor story – Initial analysisoriginal ↗
12 Apr 2024
DinodasRAT Linux implant targeting entities worldwideoriginal ↗
28 Mar 2024
Android malware, Android malware and more Android malwareoriginal ↗
20 Mar 2024
Threat landscape for industrial automation systems. H2 2023original ↗
19 Mar 2024
Previous Next