Browse public community intelligence reports, source analysis, and threat research.
44 intel reports
APT36 uses the Ghazwa spyware variant to conduct comprehensive surveillance on Android devices through media projection, audio recording, and extensive data exfiltration.
The Chinese threat actor VerdantBamboo is targeting unmonitored edge appliances such as firewalls and NAS devices to maintain persistence and bypass EDR security controls.
BlackSuit affiliates use Microsoft Teams vishing and email bombing to deploy Nimbus RAT, a Java-based malware abusing Google Drive for C2.
The Nightmare-Eclipse toolset, including BlueHammer and RedSun, was observed in a live intrusion following initial access via compromised FortiGate VPN credentials.
