Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

• Fake SSA Emails Drive Venomous#Helper Phishing Campaign

  Infosecurity Magazine

  T1566.002 95% T1219 77% T1667 47%
  22 hours ago
• When PUPs Grow Fangs: Dragon Boss Solutions' $10 Supply Chain Risk

  Huntress

  T1546.003 100% T1218.007 99% T1053.005 99%
  2026-04-14
• Active Exploitation of SolarWinds Web Help Desk (CVE-2025-26399)

  Huntress

  T1112 100% T1059.001 100% T1190 100%
  2026-02-08
• Velociraptor WSUS Exploitation, Pt. I: WSUS-Up?

  Huntress

  T1059.001 91% T1087.002 75% T1068 47%
  2025-11-20
• Active Water Saci Campaign Spreading Via WhatsApp Features Multi-Vector Persistence and Sophisticated C&C

  Trend Micro Research

  T1059.001 98% T1204.002 95% T1047 78%
  2025-10-27
• From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion

  The DFIR Report

  T1218.011 100% T1055.001 100% T1555.003 99%
  2025-09-29
• EvilAI Operators Use AI-Generated Code and Fake Apps for Far-Reaching Attacks

  Trend Micro Research

  T1012 100% T1547.001 99% T1053.005 99%
  2025-09-11
• Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs

  The DFIR Report

  T1003.001 100% T1046 99% T1021.001 99%
  2025-09-08
• Crypto24 Ransomware Group Blends Legitimate Tools with Custom Malware for Stealth Attacks

  Trend Micro Research

  T1056.001 100% T1486 99% T1021.001 95%
  2025-08-14
• Hide Your RDP: Password Spray Leads to RansomHub Deployment

  The DFIR Report

  T1078 100% T1486 99% T1003.001 99%
  2025-06-30
• Another Confluence Bites the Dust: Falling to ELPACO-team Ransomware

  The DFIR Report

  T1003.001 100% T1021.001 99% T1021.002 99%
  2025-05-19
• A Sysmon Event ID Breakdown – Updated to Include 29!!

  Black Hills InfoSec

  T1070.004 100% T1574.001 98% T1021.001 97%
  2021-01-08