Threat Research

Threat Research Blog

In-depth analysis of AI-enabled attacks, cloud-enabled attacks, web threats, and malware.

All AI Auth Botnet Cloud Command and Control Credential Theft Crypto Espionage Malware Phishing Ransomware Remote Access Social Engineering Supply Chain Vulnerability

Latest Microsoft Office Zero-day Served via Godzilla Botnet

Vulnerability Malware

Latest Microsoft Office Zero-day Served via Godzilla Botnet

April 11, 20171 min read

Analysis of the Godzilla Botnet Loader’s Evasive Techniques

Analysis of the Godzilla Botnet Loader’s Evasive Techniques

April 7, 20175 min read

Macro-based Office Malware using Cloud Services

Macro-based Office Malware using Cloud Services

March 22, 20175 min read

Targeted Attack Campaigns with Multi-Variate Malware Observed in the Cloud

Cloud Vulnerability

Targeted Attack Campaigns with Multi-Variate Malware Observed in the Cloud

March 8, 20176 min read

Cloudbleed: Analysis of apps affected and what you can do about it

Cloudbleed: Analysis of apps affected and what you can do about it

March 4, 20174 min read

Cloud CRM Services as a Malware Attack Vector

Cloud CRM Services as a Malware Attack Vector

February 9, 20176 min read

Decoys, RATs, and the Cloud: The growing trend

Malware Vulnerability

Decoys, RATs, and the Cloud: The growing trend

February 3, 20177 min read

Ransomware + Click Fraud: A New Blended Attack

Ransomware + Click Fraud: A New Blended Attack

January 30, 20178 min read

Virlock’s resurgence poses bigger threat to file syncing over the cloud

Virlock’s resurgence poses bigger threat to file syncing over the cloud

January 30, 20172 min read

Decoys, Phishing, and the Cloud: The Latest Fan-out Effect

Decoys, Phishing, and the Cloud: The Latest Fan-out Effect

January 18, 20176 min read

New Variants of Locky Ransomware Found

Cloud Ransomware

New Variants of Locky Ransomware Found

December 15, 20164 min read

Manually Deobfuscating Strings Obfuscated in Malicious JavaScript Code

Manually Deobfuscating Strings Obfuscated in Malicious JavaScript Code

November 7, 20169 min read