thumbnail Hide Your RDP: Password Spray Leads to RansomHub Deployment
thumbnail Another Confluence Bites the Dust: Falling to ELPACO-team Ransomware
thumbnail Navigating Through The Fog
thumbnail Fake Zoom Ends in BlackSuit Ransomware
thumbnail Confluence Exploit Leads to LockBit Ransomware
thumbnail Cobalt Strike and a Pair of SOCKS Lead to LockBit Ransomware
thumbnail Nitrogen Campaign Drops Sliver and Ends With BlackCat Ransomware
thumbnail BlackSuit Ransomware
thumbnail Threat Actors’ Toolkit: Leveraging Sliver, PoshC2 & Batch Scripts
thumbnail IcedID Brings ScreenConnect and CSharp Streamer to ALPHV Ransomware Deployment – The DFIR Report
thumbnail From OneNote to RansomNote: An Ice Cold Intrusion - The DFIR Report
thumbnail SEO Poisoning to Domain Control: The Gootloader Saga Continues
thumbnail Buzzing on Christmas Eve: Trigona Ransomware in 3 Hours
thumbnail From ScreenConnect to Hive Ransomware in 61 hours
thumbnail BumbleBee Zeros in on Meterpreter
thumbnail BumbleBee: Round Two
thumbnail Dead or Alive? An Emotet Story