Archive


SOC, TI and IR posts

Outlaw cybergang attacking targets worldwide

Malware descriptions

Triada strikes back


GReAT research

Operation SyncHole: Lazarus APT goes back to the well

GReAT research

Russian organizations targeted by backdoor masquerading as secure networking software updates

Malware descriptions

Lumma Stealer – Tracking distribution channels


Spam and phishing

Phishing attacks leveraging HTML code inside SVG files

GReAT research

IronHusky updates the forgotten MysterySnail RAT to target Russia and Mongolia

SOC, TI and IR posts

Streamlining detection engineering in security operation centers

Authors Categories Tags
  • Subscribe

  • Reports

    Crypto wasted: BlueNoroff’s ghost mirage of funding and jobs

    Kaspersky GReAT experts dive deep into the BlueNoroff APT’s GhostCall and GhostHire campaigns. Extensive research detailing multiple malware chains targeting macOS, including a stealer suite, fake Zoom and Microsoft Teams clients and ChatGPT-enhanced images.

    Mem3nt0 mori – The Hacking Team is back!

    Kaspersky researchers discovered previously unidentified commercial Dante spyware developed by Memento Labs (formerly Hacking Team) and linked it to the ForumTroll APT attacks.

    Mysterious Elephant: a growing threat

    Kaspersky GReAT experts describe the latest Mysterious Elephant APT activity. The threat actor exfiltrates data related to WhatsApp and employs tools such as BabShell and MemLoader HidenDesk.