N. Korean Hacking Group, Kimsuky, Escalates Attacks
Kimsuky (aka Velvet Chollima, Black Banshee, and Thallium) is a known N. Korean state-sponsored threat actor. The group has been…
Read MoreResources and Insights
The latest industry news, interviews, technologies, and intelligence resources curated by CYFIRMA cyber threat experts.
Understanding Open Proxies and Cyberattacks
CYFIRMA research first alerted clients on the increase in open proxy usage as the attack method by known nation-sponsored actor…
Read More
Out of Band Notification: Next Emotet Campaign
As of December 25, CYFIRMA Threat Intelligence team had gathered indicators suggesting that a new wave of the notorious Emotet…
Read More
Out of band notification, UPDATE – PHP ACE VULNERABILITY
As on November 3, CYFIRMA Threat Intelligence had observed heightened interest in Korean and Russian speaking hacker groups about the…
Read More
Out of band notification, UPDATE – NGINX WEBSERVER EXPLOIT
Between 29 May 2019 – 2 June 2019, CYFIRMA Threat Intelligence have observed Korean and Mandarin speaking hackers showing intense…
Read More
CYFIRMA’s Cyber Threat and Risk Prediction Report for 2019
AUTHOR CYFIRMA TOKYO/SINGAPORE, Nov 28, 2018: CYFIRMA releases its Cyber Threat and Risk Predictions for 2019. Kumar Ritesh, CYFIRMA…
Read More
UPDATE – TOKYO OLYMPICS 2020 THEMED SPEAR PHISHING/SMISHING CAMPAIGN
Over the last 24 hours, CYFIRMA Threat Intelligence has gathered information which indicates that financially motivated Chinese speaking cybercriminals are…
Read More
WARNING – HACKERS PREPARING TO LAUNCH ATTACKS AGAINST SUSCEPTIBLE APACHE STRUTS 2 SYSTEMS
In the last 24 hours, CTI has gathered additional details about the vulnerability CVE-2016-1000031. Once again, we suspect threat actor…
Read More
UPDATE – LETSDANCE RANSOMWARE CAMPAIGN
Over the last 24 hours, we have gathered additional indicators around LetsDance Ransomware. Antuit Cyber Intelligence Research Team (“ACIRT”) has…
Read More
WARNING OF A GDPR NON-COMPLIANT THEMED DATA STEALING MALWARE
Antuit Cyber Intelligence Research Team (“ACIRT”) has determined a possibility of GDPR Non-Compliant themed phishing campaign which distributes a Data…
Read More
UPDATE OF A NEW DOUBLE-FACE CRYPTOMINER CAMPAIGN
On 25th April, Antuit Cyber Intelligence Research Team (“ACIRT”) intercepted communications between threat actors in a few specific hacker forums,…
Read More
UPDATE OF A NEW PERMANENT LOCKDOWN RANSOMWARE CAMPAIGN
Over the last 24 hours, Antuit Cyber Intelligence Research Team (“ACIRT”) have observed an increase in chatter between threat actors…
Read MoreStay ahead of every threat
Join the enterprises anticipating attacks instead of reacting to them. Start your intelligence journey today.
