Threat Intelligence

Stay up to date with the latest research and threat intelligence reports.

Oil refinery petrochemical industrial at night

Active Nitrogen campaign delivered via malicious ads for PuTTY, FileZilla

Jérôme Segura

April 9, 2024

0 Comments

Threat actors once again target system administrators via their favorite tools. Learn more about their TTPs and use the IOCs provide to investigate.

Bing ad for NordVPN leads to SecTopRAT

Jérôme Segura

April 4, 2024

0 Comments

Threat actors are luring victims to a fake NordVPN website that installs a Remote Access Trojan.

2024 State of Malware in Education report: Top 6 cyberthreats facing K-12 and Higher Ed

Malwarebytes Labs

April 1, 2024

0 Comments

From ransomware to LOTL attacks, the top threats your educational institution needs to be aware of in 2024.

Stopping a K-12 cyberattack (SolarMarker) with ThreatDown MDR

Bill Cozens

March 28, 2024

0 Comments

How experts uncovered a years-long SolarMarker attack on a K-12 district

New Go loader pushes Rhadamanthys stealer

Jérôme Segura

March 22, 2024

0 Comments

A malicious ad for the popular admin tool PuTTY leads victims to a fake site that downloads malware.

FakeBat delivered via several active malvertising campaigns

Jérôme Segura

March 12, 2024

0 Comments

A number of software brands are being impersonated with malicious ads and fake sites to distribute malware.

Ransomware review: March 2024

Threat Intelligence Team

March 12, 2024

0 Comments

February 2024 is likely to be remembered as one of the most turbulent months in ransomware history.

PikaBot malware on the rise: What organizations need to know

Bill Cozens

March 1, 2024

0 Comments

Ransomware gangs are using a powerful new trojan named PikaBot.

Stopping a targeted attack on a Managed Service Provider (MSP) with ThreatDown MDR

Bill Cozens

February 28, 2024

0 Comments

Detecting and disrupting a months-long malware campaign on an MSP.

1 2 3 … 16 Next