Archive


SOC, TI and IR posts

ShrinkLocker: Turning BitLocker into ransomware

Research

A journey into forgotten Null Session and MS-RPC interfaces


Crimeware reports

Stealers, stealers and more stealers

Software

QakBot attacks with Windows zero-day (CVE-2024-30051)

SOC, TI and IR posts

Incident response analyst report 2023


APT reports

APT trends report Q1 2024

Publications

State of ransomware in 2024

Vulnerability reports

Exploits and vulnerabilities in Q1 2024

Authors Categories Tags
  • Subscribe

  • Reports

    Crypto wasted: BlueNoroff’s ghost mirage of funding and jobs

    Kaspersky GReAT experts dive deep into the BlueNoroff APT’s GhostCall and GhostHire campaigns. Extensive research detailing multiple malware chains targeting macOS, including a stealer suite, fake Zoom and Microsoft Teams clients and ChatGPT-enhanced images.

    Mem3nt0 mori – The Hacking Team is back!

    Kaspersky researchers discovered previously unidentified commercial Dante spyware developed by Memento Labs (formerly Hacking Team) and linked it to the ForumTroll APT attacks.

    Mysterious Elephant: a growing threat

    Kaspersky GReAT experts describe the latest Mysterious Elephant APT activity. The threat actor exfiltrates data related to WhatsApp and employs tools such as BabShell and MemLoader HidenDesk.