Self Assessment
Resources

Blogs


Windows Internet Key Exchange (IKE) Remote Code Execution Vulnerability Analysis
Post 2022-11-25
Windows Internet Key Exchange (IKE) Remote Code Execution Vulnerability Analysis

Executive Summary CYFIRMA research team observed a series of exploits active in the wild targeting Windows Internet Key Exchange (IKE) Protocol Extensions. We believe with moderate confidence that this vulnerability…

From North Korean Phishing to Underground Online Hosting Services
Post 2022-11-16
From North Korean Phishing to Underground Online Hosting Services

Executive Summary During CYFIRMA's routine research on advanced persistent threat actors (APT) activity, we observed North Korean actors using a malicious domain registrar used in a wide range of online…

Prestige Ransomware Analysis
Post 2022-11-10
Prestige Ransomware Analysis

Executive Summary CYFIRMA Research team has seen an uptick in threat actor-orchestrated ransomware campaigns. We have reasons to believe that Prestige Ransomware has been used with notable features that differentiate…

Mirai – The Botnet that Made IoT Dangerous
Post 2022-09-15
Mirai – The Botnet that Made IoT Dangerous

Introduction Mirai is a self-propagating botnet malware created by Paras Jha and his friends Josiah White and Dalton Norman. Their operation was aimed almost exclusively at Minecraft servers and other…

Quantum Computing and Who is Leading the Cyber Arms Race
Post 2022-07-28
Quantum Computing and Who is Leading the Cyber Arms Race

Why is the NIST worried about quantum computing when it’s going to take some time for it to become a reality? How is quantum computing disrupting the world of cyber?…

Keksec and EnemyBot – From Edgy Teenagers To Serious Cybercriminals
Post 2022-06-28
Keksec and EnemyBot – From Edgy Teenagers To Serious Cybercriminals

Introduction EnemyBot is a Linux-based botnet attributed to a threat group Keksec which is also known as Kek Security. This group has been active since at least 2014 and continues…

What is going on with Lapsus$?
Post 2022-04-13
What is going on with Lapsus$?

What's going on with Lapsus$ By Adam Parsons, CYFIRMA Cyber Threat Intelligence     Lapsus$ has hit the headlines recently partly due to the mega-corporations that they appear to have successfully…

A New World Order in the Making – Observations on the Latest Geopolitical Development and the Impact on Cybersecurity
Post 2022-04-04
A New World Order in the Making – Observations on the Latest Geopolitical Development and the Impact on Cybersecurity

A New World Order in the Making - Observations on the Latest Geopolitical Development and the Impact on Cybersecurity   Ongoing Ukraine – Russia conflict could well be the straw…

RaidForums Users – Where is their Next Home?
Post 2022-03-28
RaidForums Users – Where is their Next Home?

RaidForums Users – Where is their Next Home?   Requiring no introduction, the RaidForums(RF) was the leading and most popular hacking forum residing on the surface web. This online community…

Look Inside Ransomware Gang Through Conti Leaks
Post 2022-03-19
Look Inside Ransomware Gang Through Conti Leaks

Conti gang is one of the largest cybercrime syndicates in the world. Third-party blockchain analysis of their bitcoin wallets estimates up to USD 200 million of annual revenue. Recently leaked…

1 2 3 4 … 8