41554 blogs · [ { "id": "01a0ca8e-8dac-7138-a57d-bdd888fbf102", "title": "Selecting the right MSSP: Guidelines for making an objective decision", "url": "https://securelist.com/selecting-the-right-mssp/109321/", "published_at": "2023-03-30T10:00:06+00:00" }, { "id": "01a0ca8e-8dac-7138-a57d-bdd889b21f45", "title": "Financial cyberthreats in 2022", "url": "https://securelist.com/financial-cyberthreats-in-2022/109219/", "published_at": "2023-03-29T10:00:02+00:00" }, { "id": "01a0ca8e-8dac-7138-a57d-bdd88a2f8454", "title": "Copy-paste heist or clipboard-injector attacks on cryptousers", "url": "https://securelist.com/copy-paste-heist-clipboard-injector-targeting-cryptowallets/109186/", "published_at": "2023-03-28T10:00:08+00:00" }, { "id": "01a0ca8e-8dac-7138-a57d-bdd88a38de15", "title": "How scammers employ IPFS for email phishing", "url": "https://securelist.com/ipfs-phishing/109158/", "published_at": "2023-03-27T08:00:48+00:00" }, { "id": "01a0ca8e-8dac-7138-a57d-bdd88adc41d8", "title": "Understanding metrics to measure SOC effectiveness", "url": "https://securelist.com/understanding-metrics-to-measure-soc-effectiveness/109061/", "published_at": "2023-03-24T08:00:56+00:00" }, { "id": "01a0ca8e-8dac-7138-a57d-bdd88bbe2b8c", "title": "Developing an incident response playbook", "url": "https://securelist.com/developing-an-incident-response-playbook/109145/", "published_at": "2023-03-23T08:00:00+00:00" }, { "id": "01a0ca8e-8dac-7138-a57d-bdd88c59ad70", "title": "Bad magic: new APT found in the area of Russo-Ukrainian conflict", "url": "https://securelist.com/bad-magic-apt/109087/", "published_at": "2023-03-21T08:00:37+00:00" }, { "id": "01a0ca8e-bd83-70ab-adc4-4ca15811214c", "title": "Business on the dark web: deals and regulatory mechanisms", "url": "https://securelist.com/dark-web-deals-and-regulations/109034/", "published_at": "2023-03-15T10:00:35+00:00" }, { "id": "01a0ca8e-bd84-73bb-af73-6184cb43594b", "title": "Malvertising through search engines", "url": "https://securelist.com/malvertising-through-search-engines/108996/", "published_at": "2023-03-09T10:00:18+00:00" }, { "id": "01a0ca8e-bd84-73bb-af73-6184cbd0af82", "title": "The state of stalkerware in 2022", "url": "https://securelist.com/the-state-of-stalkerware-in-2022/108985/", "published_at": "2023-03-08T10:00:44+00:00" }, { "id": "01a0ca8e-bd84-73bb-af73-6184ccb84f41", "title": "Threat landscape for industrial automation systems for H2 2022", "url": "https://securelist.com/threat-landscape-for-industrial-automation-systems-for-h2-2022/108958/", "published_at": "2023-03-06T10:00:45+00:00" }, { "id": "01a0ca8e-bd84-73bb-af73-6184ccc9e78c", "title": "The mobile malware threat landscape in 2022", "url": "https://securelist.com/mobile-threat-report-2022/108844/", "published_at": "2023-02-27T10:05:35+00:00" }, { "id": "01a0ca8e-bd84-73bb-af73-6184cda94fdb", "title": "Spam and phishing in 2022", "url": "https://securelist.com/spam-phishing-scam-report-2022/108692/", "published_at": "2023-02-16T08:00:07+00:00" }, { "id": "01a0ca8e-bd84-73bb-af73-6184ce3cbe25", "title": "IoC detection experiments with ChatGPT", "url": "https://securelist.com/ioc-detection-experiments-with-chatgpt/108756/", "published_at": "2023-02-15T10:00:53+00:00" }, { "id": "01a0ca8e-bd84-73bb-af73-6184ceeb6124", "title": "Good, Perfect, Best: how the analyst can enhance penetration testing results", "url": "https://securelist.com/how-the-analyst-can-enhance-pentest/108652/", "published_at": "2023-02-10T10:00:33+00:00" }, { "id": "01a0ca8e-bd84-73bb-af73-6184cfe29e39", "title": "Web beacons on websites and in e-mail", "url": "https://securelist.com/web-beacons-on-websites-and-in-email/108632/", "published_at": "2023-02-07T08:00:09+00:00" }, { "id": "01a0ca8e-bd84-73bb-af73-6184d09569a2", "title": "Prilex modification now targeting contactless credit card transactions", "url": "https://securelist.com/prilex-modification-now-targeting-contactless-credit-card-transactions/108569/", "published_at": "2023-01-31T08:00:41+00:00" }, { "id": "01a0ca8e-edc8-7308-9c07-7220739f0a0d", "title": "Come to the dark side: hunting IT professionals on the dark web", "url": "https://securelist.com/darknet-it-headhunting/108526/", "published_at": "2023-01-30T10:00:30+00:00" }, { "id": "01a0ca8e-edc8-7308-9c07-722074650a7d", "title": "What your SOC will be facing in 2023", "url": "https://securelist.com/soc-socc-predictions-2023/108512/", "published_at": "2023-01-23T10:00:08+00:00" }, { "id": "01a0ca8e-edc8-7308-9c07-72207500b22e", "title": "Roaming Mantis implements new DNS changer in its malicious mobile app in 2022", "url": "https://securelist.com/roaming-mantis-dns-changer-in-malicious-mobile-app/108464/", "published_at": "2023-01-19T10:00:06+00:00" }, { "id": "01a0ca8e-edc8-7308-9c07-7220754ba8a1", "title": "What threatens corporations in 2023: media blackmail, fake leaks and cloud attacks", "url": "https://securelist.com/corporate-threat-predictions-2023/108456/", "published_at": "2023-01-18T08:00:45+00:00" }, { "id": "01a0ca8e-edc8-7308-9c07-722076316548", "title": "How much security is enough?", "url": "https://securelist.com/how-much-security-is-enough/108434/", "published_at": "2023-01-09T10:38:33+00:00" }, { "id": "01a0ca8e-edc8-7308-9c07-722076c5c5bf", "title": "BlueNoroff introduces new methods bypassing MoTW", "url": "https://securelist.com/bluenoroff-methods-bypass-motw/108383/", "published_at": "2022-12-27T08:00:26+00:00" }, { "id": "01a0ca8e-edc8-7308-9c07-722077143175", "title": "Ransomware and wiper signed with stolen certificates", "url": "https://securelist.com/ransomware-and-wiper-signed-with-stolen-certificates/108350/", "published_at": "2022-12-22T08:00:32+00:00" }, { "id": "01a0ca8e-edc8-7308-9c07-7220777f7675", "title": "CVE-2022-41040 and CVE-2022-41082 – zero-days in MS Exchange", "url": "https://securelist.com/cve-2022-41040-and-cve-2022-41082-zero-days-in-ms-exchange/108364/", "published_at": "2022-12-19T16:15:49+00:00" }, { "id": "01a0ca8e-edc8-7308-9c07-722077ce5fd3", "title": "Reassessing cyberwarfare. Lessons learned in 2022", "url": "https://securelist.com/reassessing-cyberwarfare-lessons-learned-in-2022/108328/", "published_at": "2022-12-14T10:00:18+00:00" }, { "id": "01a0ca8e-edc8-7308-9c07-722078a29b03", "title": "How to train your Ghidra", "url": "https://securelist.com/how-to-train-your-ghidra/108272/", "published_at": "2022-12-09T13:00:23+00:00" }, { "id": "01a0ca8f-1b05-72ba-8df6-edcadd4ab59b", "title": "DeathStalker targets legal entities with new Janicab variant", "url": "https://securelist.com/deathstalker-targets-legal-entities-with-new-janicab-variant/108131/", "published_at": "2022-12-08T10:00:49+00:00" }, { "id": "01a0ca8f-1b05-72ba-8df6-edcadde40f88", "title": "Main phishing and scamming trends and techniques", "url": "https://securelist.com/phishing-scam-techniques-tricks/108247/", "published_at": "2022-12-06T10:00:01+00:00" }, { "id": "01a0ca8f-1b05-72ba-8df6-edcade119426", "title": "Crimeware trends: self-propagation and driver exploitation", "url": "https://securelist.com/crimeware-report-ransomware-tactics-vulnerable-drivers/108197/", "published_at": "2022-12-05T10:00:58+00:00" }, { "id": "01a0ca8f-1b05-72ba-8df6-edcade929dbf", "title": "Indicators of compromise (IOCs): how we collect and use them", "url": "https://securelist.com/how-to-collect-and-use-indicators-of-compromise/108184/", "published_at": "2022-12-02T08:00:07+00:00" }, { "id": "01a0ca8f-1b05-72ba-8df6-edcadf076136", "title": "Kaspersky Security Bulletin 2022. Statistics", "url": "https://securelist.com/ksb-2022-statistics/108129/", "published_at": "2022-12-01T11:00:36+00:00" }, { "id": "01a0ca8f-1b05-72ba-8df6-edcadf97d798", "title": "Privacy predictions 2023", "url": "https://securelist.com/privacy-predictions-2023/108068/", "published_at": "2022-11-28T08:00:47+00:00" }, { "id": "01a0ca8f-1b05-72ba-8df6-edcadf9c4961", "title": "Consumer cyberthreats: predictions for 2023", "url": "https://securelist.com/consumer-threats-2023/108112/", "published_at": "2022-11-28T08:00:24+00:00" }, { "id": "01a0ca8f-1b05-72ba-8df6-edcae0524efa", "title": "Who tracked internet users in 2021–2022", "url": "https://securelist.com/tracker-report-2021-2022/108079/", "published_at": "2022-11-25T08:00:07+00:00" }, { "id": "01a0ca8f-1b05-72ba-8df6-edcae06ba9a8", "title": "Black Friday shoppers beware: online threats so far in 2022", "url": "https://securelist.com/black-friday-report-2022/108042/", "published_at": "2022-11-23T08:00:00+00:00" }, { "id": "01a0ca8f-1b05-72ba-8df6-edcae0b2cdbc", "title": "ICS cyberthreats in 2023 – what to expect", "url": "https://securelist.com/ics-cyberthreats-in-2023/108011/", "published_at": "2022-11-22T08:00:51+00:00" }, { "id": "01a0ca8f-326a-7307-b0b1-743a73a60051", "title": "Policy trends: where are we today on regulation in cyberspace?", "url": "https://securelist.com/policy-trends-2023/108008/", "published_at": "2022-11-22T08:00:30+00:00" }, { "id": "01a0ca8f-326a-7307-b0b1-743a74874fdc", "title": "Crimeware and financial cyberthreats in 2023", "url": "https://securelist.com/crimeware-financial-cyberthreats-2023/108005/", "published_at": "2022-11-22T08:00:12+00:00" }, { "id": "01a0ca8f-326a-7307-b0b1-743a751d4109", "title": "IT threat evolution in Q3 2022. Non-mobile statistics", "url": "https://securelist.com/it-threat-evolution-in-q3-2022-non-mobile-statistics/107963/", "published_at": "2022-11-18T08:10:34+00:00" }, { "id": "01a0ca8f-326a-7307-b0b1-743a75a3ca70", "title": "IT threat evolution in Q3 2022. Mobile statistics", "url": "https://securelist.com/it-threat-evolution-in-q3-2022-mobile-statistics/107978/", "published_at": "2022-11-18T08:05:33+00:00" }, { "id": "01a0ca8f-326a-7307-b0b1-743a7680d73f", "title": "IT threat evolution Q3 2022", "url": "https://securelist.com/it-threat-evolution-q3-2022/107957/", "published_at": "2022-11-18T08:00:32+00:00" }, { "id": "01a0ca8f-326a-7307-b0b1-743a76bdab7b", "title": "DTrack activity targeting Europe and Latin America", "url": "https://securelist.com/dtrack-targeting-europe-latin-america/107798/", "published_at": "2022-11-15T10:00:28+00:00" }, { "id": "01a0ca8f-326a-7307-b0b1-743a7732bd0d", "title": "Advanced threat predictions for 2023", "url": "https://securelist.com/advanced-threat-predictions-for-2023/107939/", "published_at": "2022-11-14T08:00:24+00:00" }, { "id": "01a0ca8f-326a-7307-b0b1-743a77a5e78a", "title": "The state of cryptojacking in the first three quarters of 2022", "url": "https://securelist.com/cryptojacking-report-2022/107898/", "published_at": "2022-11-10T08:00:38+00:00" }, { "id": "01a0ca8f-326a-7307-b0b1-743a786ee6e2", "title": "Cybersecurity threats: what awaits us in 2023?", "url": "https://securelist.com/cybersecurity-threats-2023/107888/", "published_at": "2022-11-09T08:00:23+00:00" }, { "id": "01a0ca8f-326a-7307-b0b1-743a795db587", "title": "DDoS attacks in Q3 2022", "url": "https://securelist.com/ddos-report-q3-2022/107860/", "published_at": "2022-11-07T08:00:31+00:00" }, { "id": "01a0ca8f-505a-72b0-a4aa-e68e6fc4a485", "title": "Server-side attacks, C&C in public clouds and other MDR cases we observed", "url": "https://securelist.com/server-side-attacks-cc-in-public-clouds-mdr-cases/107826/", "published_at": "2022-11-02T08:00:22+00:00" }, { "id": "01a0ca8f-505a-72b0-a4aa-e68e707b7428", "title": "APT trends report Q3 2022", "url": "https://securelist.com/apt-trends-report-q3-2022/107787/", "published_at": "2022-11-01T08:00:06+00:00" }, { "id": "01a0ca8f-505a-72b0-a4aa-e68e70d30693", "title": "APT10: Tracking down LODEINFO 2022, part II", "url": "https://securelist.com/apt10-tracking-down-lodeinfo-2022-part-ii/107745/", "published_at": "2022-10-31T08:00:54+00:00" }, { "id": "01a0ca8f-505a-72b0-a4aa-e68e713f45ca", "title": "APT10: Tracking down LODEINFO 2022, part I", "url": "https://securelist.com/apt10-tracking-down-lodeinfo-2022-part-i/107742/", "published_at": "2022-10-31T08:00:52+00:00" }, { "id": "01a0ca8f-505a-72b0-a4aa-e68e713fc32c", "title": "DiceyF deploys GamePlayerFramework in online casino development studio", "url": "https://securelist.com/diceyf-deploys-gameplayerframework-in-online-casino-development-studio/107723/", "published_at": "2022-10-17T18:37:05+00:00" }, { "id": "01a0ca8f-505a-72b0-a4aa-e68e723b3452", "title": "Ongoing exploitation of CVE-2022-41352 (Zimbra 0-day)", "url": "https://securelist.com/ongoing-exploitation-of-cve-2022-41352-zimbra-0-day/107703/", "published_at": "2022-10-13T08:00:21+00:00" }, { "id": "01a0ca8f-505a-72b0-a4aa-e68e730f21ae", "title": "Malicious WhatsApp mod distributed through legitimate apps", "url": "https://securelist.com/malicious-whatsapp-mod-distributed-through-legitimate-apps/107690/", "published_at": "2022-10-12T08:00:16+00:00" }, { "id": "01a0ca8f-505a-72b0-a4aa-e68e73dae89f", "title": "TOP 10 unattributed APT mysteries", "url": "https://securelist.com/top-10-unattributed-apt-mysteries/107676/", "published_at": "2022-10-07T10:00:47+00:00" }, { "id": "01a0ca8f-505a-72b0-a4aa-e68e73ffde98", "title": "A look at the 2020–2022 ATM/PoS malware landscape", "url": "https://securelist.com/atm-pos-malware-landscape-2020-2022/107656/", "published_at": "2022-10-06T08:00:38+00:00" }, { "id": "01a0ca8f-505a-72b0-a4aa-e68e74134d0a", "title": "Uncommon infection and malware propagation methods", "url": "https://securelist.com/uncommon-infection-and-malware-propagation-methods/107640/", "published_at": "2022-10-05T09:00:14+00:00" }, { "id": "01a0ca8f-6815-72dc-9b52-761ed246526c", "title": "OnionPoison: infected Tor Browser installer distributed through popular YouTube channel", "url": "https://securelist.com/onionpoison-infected-tor-browser-installer-youtube/107627/", "published_at": "2022-10-04T10:00:29+00:00" }, { "id": "01a0ca8f-6815-72dc-9b52-761ed31495d6", "title": "DeftTorero: tactics, techniques and procedures of intrusions revealed", "url": "https://securelist.com/defttorero-tactics-techniques-and-procedures/107610/", "published_at": "2022-10-03T07:00:15+00:00" }, { "id": "01a0ca8f-6815-72dc-9b52-761ed3389e06", "title": "The secrets of Schneider Electric’s UMAS protocol", "url": "https://securelist.com/the-secrets-of-schneider-electrics-umas-protocol/107435/", "published_at": "2022-09-29T08:00:53+00:00" }, { "id": "01a0ca8f-6815-72dc-9b52-761ed389c912", "title": "Prilex: the pricey prickle credit card complex", "url": "https://securelist.com/prilex-atm-pos-malware-evolution/107551/", "published_at": "2022-09-28T08:00:41+00:00" }, { "id": "01a0ca8f-6815-72dc-9b52-761ed432f14d", "title": "NullMixer: oodles of Trojans in a single dropper", "url": "https://securelist.com/nullmixer-oodles-of-trojans-in-a-single-dropper/107498/", "published_at": "2022-09-26T08:00:10+00:00" }, { "id": "01a0ca8f-6815-72dc-9b52-761ed45c20d1", "title": "Mass email campaign with a pinch of targeted spam", "url": "https://securelist.com/agent-tesla-malicious-spam-campaign/107478/", "published_at": "2022-09-23T08:00:13+00:00" }, { "id": "01a0ca8f-6815-72dc-9b52-761ed4d5968a", "title": "External attack surface and ongoing cybercriminal activity in APAC region", "url": "https://securelist.com/external-attack-surface-and-ongoing-cybercriminal-activity-in-apac-region/107430/", "published_at": "2022-09-19T14:00:21+00:00" }, { "id": "01a0ca8f-6815-72dc-9b52-761ed5a81cc8", "title": "Self-spreading stealer attacks gamers via YouTube", "url": "https://securelist.com/self-spreading-stealer-attacks-gamers-via-youtube/107407/", "published_at": "2022-09-15T08:00:14+00:00" }, { "id": "01a0ca8f-6815-72dc-9b52-761ed64ab1d2", "title": "Threat landscape for industrial automation systems for H1 2022", "url": "https://securelist.com/threat-landscape-for-industrial-automation-systems-for-h1-2022/107373/", "published_at": "2022-09-08T07:59:54+00:00" }, { "id": "01a0ca8f-6815-72dc-9b52-761ed67984cc", "title": "Good game, well played: an overview of gaming-related cyberthreats in 2022", "url": "https://securelist.com/gaming-related-cyberthreats-2021-2022/107346/", "published_at": "2022-09-06T08:18:10+00:00" }, { "id": "01a0ca8f-9380-71e1-bfbd-a0417819357a", "title": "The nature of cyber incidents", "url": "https://securelist.com/the-nature-of-cyber-incidents/107119/", "published_at": "2022-09-05T10:00:38+00:00" }, { "id": "01a0ca8f-9380-71e1-bfbd-a04178cc49c5", "title": "Kimsuky’s GoldDragon cluster and its C2 operations", "url": "https://securelist.com/kimsukys-golddragon-cluster-and-its-c2-operations/107258/", "published_at": "2022-08-25T01:00:31+00:00" }, { "id": "01a0ca8f-9380-71e1-bfbd-a04179512015", "title": "Ransomware updates & 1-day exploits", "url": "https://securelist.com/ransomware-updates-1-day-exploits/107291/", "published_at": "2022-08-24T10:00:13+00:00" }, { "id": "01a0ca8f-9380-71e1-bfbd-a041796fe9e4", "title": "Black Hat USA 2022 and DEF CON 30", "url": "https://securelist.com/black-hat-usa-2022-and-def-con-30/107184/", "published_at": "2022-08-17T13:00:25+00:00" }, { "id": "01a0ca8f-9380-71e1-bfbd-a0417a2912fb", "title": "Two more malicious Python packages in the PyPI", "url": "https://securelist.com/two-more-malicious-python-packages-in-the-pypi/107218/", "published_at": "2022-08-16T12:00:59+00:00" }, { "id": "01a0ca8f-9380-71e1-bfbd-a0417ac625ad", "title": "Threat in your browser: what dangers innocent-looking extensions hold for users", "url": "https://securelist.com/threat-in-your-browser-extensions/107181/", "published_at": "2022-08-16T08:00:36+00:00" }, { "id": "01a0ca8f-9380-71e1-bfbd-a0417ba4fe95", "title": "IT threat evolution in Q2 2022. Mobile statistics", "url": "https://securelist.com/it-threat-evolution-in-q2-2022-mobile-statistics/107123/", "published_at": "2022-08-15T12:00:45+00:00" }, { "id": "01a0ca8f-9380-71e1-bfbd-a0417c01b27e", "title": "IT threat evolution in Q2 2022. Non-mobile statistics", "url": "https://securelist.com/it-threat-evolution-in-q2-2022-non-mobile-statistics/107133/", "published_at": "2022-08-15T12:00:43+00:00" }, { "id": "01a0ca8f-9380-71e1-bfbd-a0417cd0e2eb", "title": "IT threat evolution Q2 2022", "url": "https://securelist.com/it-threat-evolution-q2-2022/107099/", "published_at": "2022-08-15T12:00:34+00:00" }, { "id": "01a0ca8f-9380-71e1-bfbd-a0417d9990c8", "title": "OpenTIP, command line edition", "url": "https://securelist.com/opentip-command-line-edition/107109/", "published_at": "2022-08-11T08:30:01+00:00" }, { "id": "01a0ca8f-bf49-70cb-8edd-fb5333dd1067", "title": "VileRAT: DeathStalker’s continuous strike at foreign and cryptocurrency exchanges", "url": "https://securelist.com/vilerat-deathstalkers-continuous-strike/107075/", "published_at": "2022-08-10T10:00:43+00:00" }, { "id": "01a0ca8f-bf49-70cb-8edd-fb5334c52af8", "title": "Andariel deploys DTrack and Maui ransomware", "url": "https://securelist.com/andariel-deploys-dtrack-and-maui-ransomware/107063/", "published_at": "2022-08-09T10:00:46+00:00" }, { "id": "01a0ca8f-bf49-70cb-8edd-fb5335464747", "title": "Targeted attack on industrial enterprises and public institutions", "url": "https://securelist.com/targeted-attack-on-industrial-enterprises-and-public-institutions/107054/", "published_at": "2022-08-08T08:00:10+00:00" }, { "id": "01a0ca8f-bf49-70cb-8edd-fb53358aaca8", "title": "DDoS attacks in Q2 2022", "url": "https://securelist.com/ddos-attacks-in-q2-2022/107025/", "published_at": "2022-08-03T08:00:22+00:00" }, { "id": "01a0ca8f-bf49-70cb-8edd-fb5335cf513c", "title": "LofyLife: malicious npm packages steal Discord tokens and bank card data", "url": "https://securelist.com/lofylife-malicious-npm-packages/107014/", "published_at": "2022-07-28T12:00:41+00:00" }, { "id": "01a0ca8f-bf49-70cb-8edd-fb5336ce7705", "title": "APT trends report Q2 2022", "url": "https://securelist.com/apt-trends-report-q2-2022/106995/", "published_at": "2022-07-28T10:00:37+00:00" }, { "id": "01a0ca8f-bf49-70cb-8edd-fb5336fb7a5b", "title": "CosmicStrand: the discovery of a sophisticated UEFI firmware rootkit", "url": "https://securelist.com/cosmicstrand-uefi-firmware-rootkit/106973/", "published_at": "2022-07-25T10:00:32+00:00" }, { "id": "01a0ca8f-bf49-70cb-8edd-fb5337ef8599", "title": "Luna and Black Basta — new ransomware for Windows, Linux and ESXi", "url": "https://securelist.com/luna-black-basta-ransomware/106950/", "published_at": "2022-07-20T08:00:31+00:00" }, { "id": "01a0ca8f-bf49-70cb-8edd-fb53382f6aa9", "title": "Text-based fraud: from 419 scams to vishing", "url": "https://securelist.com/mail-text-scam/106926/", "published_at": "2022-07-11T08:00:53+00:00" }, { "id": "01a0ca8f-bf49-70cb-8edd-fb53388167ec", "title": "Dynamic analysis of firmware components in IoT devices", "url": "https://securelist.com/dynamic-analysis-of-firmware-components-in-iot-devices/106901/", "published_at": "2022-07-06T10:00:32+00:00" }, { "id": "01a0ca8f-ed94-7201-b4b1-2bc7e5df0159", "title": "The SessionManager IIS backdoor", "url": "https://securelist.com/the-sessionmanager-iis-backdoor/106868/", "published_at": "2022-06-30T08:00:35+00:00" }, { "id": "01a0ca8f-ed94-7201-b4b1-2bc7e6186d63", "title": "The hateful eight: Kaspersky’s guide to modern ransomware groups’ TTPs", "url": "https://securelist.com/modern-ransomware-groups-ttps/106824/", "published_at": "2022-06-23T10:00:21+00:00" }, { "id": "01a0ca8f-ed94-7201-b4b1-2bc7e705aeae", "title": "APT ToddyCat", "url": "https://securelist.com/toddycat/106799/", "published_at": "2022-06-21T10:00:37+00:00" }, { "id": "01a0ca8f-ed94-7201-b4b1-2bc7e7dbade5", "title": "‘Unpacking’ technical attribution and challenges for ensuring stability in cyberspace", "url": "https://securelist.com/unpacking-technical-attribution/106791/", "published_at": "2022-06-20T10:00:07+00:00" }, { "id": "01a0ca8f-ed94-7201-b4b1-2bc7e817a7cd", "title": "How much does access to corporate infrastructure cost?", "url": "https://securelist.com/initial-access-data-price-on-the-dark-web/106740/", "published_at": "2022-06-15T10:00:29+00:00" }, { "id": "01a0ca8f-ed94-7201-b4b1-2bc7e87ca222", "title": "Router security in 2021", "url": "https://securelist.com/router-security-2021/106711/", "published_at": "2022-06-08T10:00:27+00:00" }, { "id": "01a0ca8f-ed94-7201-b4b1-2bc7e8a54d8c", "title": "CVE-2022-30190 (Follina) vulnerability in MSDT: description and counteraction", "url": "https://securelist.com/cve-2022-30190-follina-vulnerability-in-msdt-description-and-counteraction/106703/", "published_at": "2022-06-06T08:00:02+00:00" }, { "id": "01a0ca8f-ed94-7201-b4b1-2bc7e97f4bd7", "title": "WinDealer dealing on the side", "url": "https://securelist.com/windealer-dealing-on-the-side/105946/", "published_at": "2022-06-02T10:00:30+00:00" }, { "id": "01a0ca8f-ed94-7201-b4b1-2bc7e9accd1d", "title": "IT threat evolution in Q1 2022. Mobile statistics", "url": "https://securelist.com/it-threat-evolution-in-q1-2022-mobile-statistics/106589/", "published_at": "2022-05-27T08:00:46+00:00" }, { "id": "01a0ca8f-ed94-7201-b4b1-2bc7ea47bcb6", "title": "IT threat evolution Q1 2022", "url": "https://securelist.com/it-threat-evolution-q1-2022/106513/", "published_at": "2022-05-27T08:00:43+00:00" }, { "id": "01a0ca90-0eda-71dc-b35e-5ba7992476b7", "title": "IT threat evolution in Q1 2022. Non-mobile statistics", "url": "https://securelist.com/it-threat-evolution-in-q1-2022-non-mobile-statistics/106531/", "published_at": "2022-05-27T08:00:05+00:00" }, { "id": "01a0ca90-0eda-71dc-b35e-5ba7998c4982", "title": "Managed detection and response in 2021", "url": "https://securelist.com/managed-detection-and-response-in-2021/106540/", "published_at": "2022-05-26T11:00:55+00:00" }, { "id": "01a0ca90-0eda-71dc-b35e-5ba799c6ae8e", "title": "The Verizon 2022 DBIR", "url": "https://securelist.com/the-verizon-2022-dbir/105844/", "published_at": "2022-05-25T15:57:59+00:00" } ] posts Claim your blog

Back to Kaspersky Securelist

Blog · corpus.blog/blogs/securelist.com/posts

Kaspersky Securelist

securelist.com

2023

Selecting the right MSSP: Guidelines for making an objective decision original ↗

30 Mar 2023

Financial cyberthreats in 2022 original ↗

29 Mar 2023

Copy-paste heist or clipboard-injector attacks on cryptousers original ↗

28 Mar 2023

How scammers employ IPFS for email phishing original ↗

27 Mar 2023

Understanding metrics to measure SOC effectiveness original ↗

24 Mar 2023

Developing an incident response playbook original ↗

23 Mar 2023

Bad magic: new APT found in the area of Russo-Ukrainian conflict original ↗

21 Mar 2023

Business on the dark web: deals and regulatory mechanisms original ↗

15 Mar 2023

Malvertising through search engines original ↗

9 Mar 2023

The state of stalkerware in 2022 original ↗

8 Mar 2023

Threat landscape for industrial automation systems for H2 2022 original ↗

6 Mar 2023

The mobile malware threat landscape in 2022 original ↗

27 Feb 2023

Spam and phishing in 2022 original ↗

16 Feb 2023

IoC detection experiments with ChatGPT original ↗

15 Feb 2023

Good, Perfect, Best: how the analyst can enhance penetration testing results original ↗

10 Feb 2023

Web beacons on websites and in e-mail original ↗

7 Feb 2023

Prilex modification now targeting contactless credit card transactions original ↗

31 Jan 2023

Come to the dark side: hunting IT professionals on the dark web original ↗

30 Jan 2023

What your SOC will be facing in 2023 original ↗

23 Jan 2023

Roaming Mantis implements new DNS changer in its malicious mobile app in 2022 original ↗

19 Jan 2023

What threatens corporations in 2023: media blackmail, fake leaks and cloud attacks original ↗

18 Jan 2023

How much security is enough?original ↗

9 Jan 2023

2022

BlueNoroff introduces new methods bypassing MoTW original ↗

27 Dec 2022

Ransomware and wiper signed with stolen certificates original ↗

22 Dec 2022

CVE-2022-41040 and CVE-2022-41082 – zero-days in MS Exchange original ↗

19 Dec 2022

Reassessing cyberwarfare. Lessons learned in 2022 original ↗

14 Dec 2022

How to train your Ghidra original ↗

9 Dec 2022

DeathStalker targets legal entities with new Janicab variant original ↗

8 Dec 2022

Main phishing and scamming trends and techniques original ↗

6 Dec 2022

Crimeware trends: self-propagation and driver exploitation original ↗

5 Dec 2022

Indicators of compromise (IOCs): how we collect and use them original ↗

2 Dec 2022

Kaspersky Security Bulletin 2022. Statistics original ↗

1 Dec 2022

Privacy predictions 2023 original ↗

28 Nov 2022

Consumer cyberthreats: predictions for 2023 original ↗

28 Nov 2022

Who tracked internet users in 2021–2022 original ↗

25 Nov 2022

Black Friday shoppers beware: online threats so far in 2022 original ↗

23 Nov 2022

ICS cyberthreats in 2023 – what to expect original ↗

22 Nov 2022

Policy trends: where are we today on regulation in cyberspace?original ↗

22 Nov 2022

Crimeware and financial cyberthreats in 2023 original ↗

22 Nov 2022

IT threat evolution in Q3 2022. Non-mobile statistics original ↗

18 Nov 2022

IT threat evolution in Q3 2022. Mobile statistics original ↗

18 Nov 2022

IT threat evolution Q3 2022 original ↗

18 Nov 2022

DTrack activity targeting Europe and Latin America original ↗

15 Nov 2022

Advanced threat predictions for 2023 original ↗

14 Nov 2022

The state of cryptojacking in the first three quarters of 2022 original ↗

10 Nov 2022

Cybersecurity threats: what awaits us in 2023?original ↗

9 Nov 2022

DDoS attacks in Q3 2022 original ↗

7 Nov 2022

Server-side attacks, C&C in public clouds and other MDR cases we observed original ↗

2 Nov 2022

APT trends report Q3 2022 original ↗

1 Nov 2022

APT10: Tracking down LODEINFO 2022, part II original ↗

31 Oct 2022

APT10: Tracking down LODEINFO 2022, part I original ↗

31 Oct 2022

DiceyF deploys GamePlayerFramework in online casino development studio original ↗

17 Oct 2022

Ongoing exploitation of CVE-2022-41352 (Zimbra 0-day)original ↗

13 Oct 2022

Malicious WhatsApp mod distributed through legitimate apps original ↗

12 Oct 2022

TOP 10 unattributed APT mysteries original ↗

7 Oct 2022

A look at the 2020–2022 ATM/PoS malware landscape original ↗

6 Oct 2022

Uncommon infection and malware propagation methods original ↗

5 Oct 2022

OnionPoison: infected Tor Browser installer distributed through popular YouTube channel original ↗

4 Oct 2022

DeftTorero: tactics, techniques and procedures of intrusions revealed original ↗

3 Oct 2022

The secrets of Schneider Electric’s UMAS protocol original ↗

29 Sept 2022

Prilex: the pricey prickle credit card complex original ↗

28 Sept 2022

NullMixer: oodles of Trojans in a single dropper original ↗

26 Sept 2022

Mass email campaign with a pinch of targeted spam original ↗

23 Sept 2022

External attack surface and ongoing cybercriminal activity in APAC region original ↗

19 Sept 2022

Self-spreading stealer attacks gamers via YouTube original ↗

15 Sept 2022

Threat landscape for industrial automation systems for H1 2022 original ↗

8 Sept 2022

Good game, well played: an overview of gaming-related cyberthreats in 2022 original ↗

6 Sept 2022

The nature of cyber incidents original ↗

5 Sept 2022

Kimsuky’s GoldDragon cluster and its C2 operations original ↗

25 Aug 2022

Ransomware updates & 1-day exploits original ↗

24 Aug 2022

Black Hat USA 2022 and DEF CON 30 original ↗

17 Aug 2022

Two more malicious Python packages in the PyPI original ↗

16 Aug 2022

Threat in your browser: what dangers innocent-looking extensions hold for users original ↗

16 Aug 2022

IT threat evolution in Q2 2022. Mobile statistics original ↗

15 Aug 2022

IT threat evolution in Q2 2022. Non-mobile statistics original ↗

15 Aug 2022

IT threat evolution Q2 2022 original ↗

15 Aug 2022

OpenTIP, command line edition original ↗

11 Aug 2022

VileRAT: DeathStalker’s continuous strike at foreign and cryptocurrency exchanges original ↗

10 Aug 2022

Andariel deploys DTrack and Maui ransomware original ↗

9 Aug 2022

Targeted attack on industrial enterprises and public institutions original ↗

8 Aug 2022

DDoS attacks in Q2 2022 original ↗

3 Aug 2022

LofyLife: malicious npm packages steal Discord tokens and bank card data original ↗

28 Jul 2022

APT trends report Q2 2022 original ↗

28 Jul 2022

CosmicStrand: the discovery of a sophisticated UEFI firmware rootkit original ↗

25 Jul 2022

Luna and Black Basta — new ransomware for Windows, Linux and ESXi original ↗

20 Jul 2022

Text-based fraud: from 419 scams to vishing original ↗

11 Jul 2022

Dynamic analysis of firmware components in IoT devices original ↗

6 Jul 2022

The SessionManager IIS backdoor original ↗

30 Jun 2022

The hateful eight: Kaspersky’s guide to modern ransomware groups’ TTPs original ↗

23 Jun 2022

APT ToddyCat original ↗

21 Jun 2022

‘Unpacking’ technical attribution and challenges for ensuring stability in cyberspace original ↗

20 Jun 2022

How much does access to corporate infrastructure cost?original ↗

15 Jun 2022

Router security in 2021 original ↗

8 Jun 2022

CVE-2022-30190 (Follina) vulnerability in MSDT: description and counteraction original ↗

6 Jun 2022

WinDealer dealing on the side original ↗

2 Jun 2022

IT threat evolution in Q1 2022. Mobile statistics original ↗

27 May 2022

IT threat evolution Q1 2022 original ↗

27 May 2022

IT threat evolution in Q1 2022. Non-mobile statistics original ↗

27 May 2022

Managed detection and response in 2021 original ↗

26 May 2022

The Verizon 2022 DBIR original ↗

25 May 2022