CYFIRMA: Threat Intelligence Firm on Ransomware Trends
CYFIRMA is a threat intelligence firm that noted ransomware campaigns are shifting toward pre-positioned access operations and abusing trusted enterprise infrastructure.
Tag: threat intelligence
New Ghost Phishing Wave Using EvilTokens Bypasses Traditional Email Security
A recent EvilTokens campaign is exploiting a new 'ghost phishing' technique that hides malicious content until it decrypts inside the victim's browser,…
ANY.RUN: Interactive Malware Analysis and Threat Intelligence
ANY.RUN is a cybersecurity company providing an interactive sandbox for malware analysis and threat intelligence feeds. Its research uncovered the Mirage2FA campaign,…
RedWing MaaS: Android Banking Malware Sold as Telegram Rental Service
A new Android malware operation called RedWing is being offered as a ready-made bank-fraud service on Telegram, allowing low-skill criminals to take…
DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts
A sophisticated device code phishing campaign targeting Microsoft 365 accounts has been observed between late June and early July 2026, leveraging collaboration-themed…
ZeroBEC Reports on Greatness PhaaS Capabilities
ZeroBEC is a cybersecurity firm that analyzed the Greatness PhaaS kit, detailing its new device code phishing and AiTM capabilities. The report…
Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure
Threat actors have been observed attempting to exploit a recently patched critical security flaw in Gitea Docker images, according to Sysdig. The…
Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT
A suspected China-nexus threat activity cluster, codenamed Operation DragonReturn by Seqrite Labs, has been targeting Indian taxpayers, tax professionals, and corporate finance…
Seqrite Labs: Cybersecurity Research
Seqrite Labs is the research arm of Quick Heal Technologies, an Indian cybersecurity company. It provides threat intelligence and security solutions for…
New Java-Based QuimaRAT MaaS Built to Run on Windows, Linux, and macOS
Cybersecurity researchers at LevelBlue have identified a new Java-based remote access trojan (RAT) named QuimaRAT, which is capable of targeting Windows, Linux,…