Threat Research

Threat Research Blog

In-depth analysis of AI-enabled attacks, cloud-enabled attacks, web threats, and malware.

All AI Auth Botnet Cloud Command and Control Credential Theft Crypto Espionage Malware Phishing Ransomware Remote Access Social Engineering Supply Chain Vulnerability

Tracking COVID-19's Effect on Remote Working by Industry and Geography

Tracking COVID-19's Effect on Remote Working by Industry and Geography

August 19, 20203 min read

Leaky O365 Links: Accidental Exposure in O365 Link Sharing

Leaky O365 Links: Accidental Exposure in O365 Link Sharing

August 18, 20205 min read

A Big Catch: Cloud Phishing from Google App Engine and Azure App Service

Phishing Credential Theft

A Big Catch: Cloud Phishing from Google App Engine and Azure App Service

August 12, 20204 min read

Netskope Threat Coverage: GuLoader

August 10, 20201 min read

GCP OAuth Token Hijacking in Google Cloud - Part 1

Cloud Credential Theft

GCP OAuth Token Hijacking in Google Cloud - Part 1

August 7, 20207 min read

Leaving Bastion Hosts Behind Part 2: AWS

Cloud Remote Access

Leaving Bastion Hosts Behind Part 2: AWS

August 5, 202012 min read

Leaky Helpdesk - Accidental Exposure of Zendesk Attachments

Leaky Helpdesk - Accidental Exposure of Zendesk Attachments

July 22, 20203 min read

Lnkr Makes a Comeback - This Ad’s For Us

Lnkr Makes a Comeback - This Ad’s For Us

July 10, 20205 min read

Leaving Bastion Hosts Behind Part 1: GCP

Cloud Remote Access

Leaving Bastion Hosts Behind Part 1: GCP

June 30, 20208 min read

AWS: Improve CloudTrail Logging for Assumed Role

AWS: Improve CloudTrail Logging for Assumed Role

May 6, 20204 min read

Google Link Sharing Risks: How to Prevent Leaky Links

Google Link Sharing Risks: How to Prevent Leaky Links

May 1, 20205 min read

Netskope @ Nullcon Goa 2020

Netskope @ Nullcon Goa 2020

April 7, 20201 min read