Archives: Out of Band

CVE-2026-24423 – SmarterTools SmarterMail Remote Code Execution Vulnerability
2026-03-12
CVE-2026-24423 – SmarterTools SmarterMail Remote Code Execution Vulnerability

EXECUTIVE SUMMARY CVE-2026-24423 is a critical unauthenticated remote code execution (RCE) vulnerability

APT Profile – Earth Lusca
2026-03-11
APT Profile – Earth Lusca

Earth Lusca (aka FishMonger) is a China-linked threat actor active since 2019, that focuses primarily

TELECOMMUNICATIONS & MEDIA Q1 I 2026 : INDUSTRY REPORT
2026-03-10
TELECOMMUNICATIONS & MEDIA Q1 I 2026 : INDUSTRY REPORT

EXECUTIVE SUMMARY The CYFIRMA Industry Report delivers original cybersecurity insights and telemetry-driven

OPERATION FALSE SIREN ANDROID SPYWARE CAMPAIGN
2026-03-09
OPERATION FALSE SIREN ANDROID SPYWARE CAMPAIGN

EXECUTIVE SUMMARY At CYFIRMA, we are committed to offering up-to-date insights into prevalent threats

TAXISPY RAT : Analysis of TaxiSpy RAT – Russian Banking – Focused Android Malware with Full Remote Control
2026-03-06
TAXISPY RAT : Analysis of TaxiSpy RAT – Russian Banking – Focused Android Malware with Full Remote Control

EXECUTIVE SUMMARY This report analyzes a highly sophisticated Android Banking Trojan with integrated

MATERIALS Q1 I 2026 : INDUSTRY REPORT
2026-03-03
MATERIALS Q1 I 2026 : INDUSTRY REPORT

EXECUTIVE SUMMARY The CYFIRMA Industry Report delivers original cybersecurity insights and telemetry-driven

Fortnightly Vulnerability Summary
2026-03-02
Fortnightly Vulnerability Summary

Fortnightly Vulnerability Summary CHECK OUT THESE FAST FACTS ON FORTNIGHTLY OBSERVED VULNERABILITIES.

Philippines Evolving Cyber Threat Landscape 2025-2026
2026-03-02
Philippines Evolving Cyber Threat Landscape 2025-2026

Executive Summary The cyber threat landscape in the Philippines has intensified significantly over

APT36 : Multi-Vector Execution Malware Campaign Targeting Indian Government Entities
2026-02-27
APT36 : Multi-Vector Execution Malware Campaign Targeting Indian Government Entities

EXECUTIVE SUMMARY CYFIRMA has identified a targeted malware campaign attributed to the Pakistan-aligned

Telegram as the New Operational Layer of Cyber Threat Activity
2026-02-26
Telegram as the New Operational Layer of Cyber Threat Activity

EXECUTIVE SUMMARY Telegram is no longer just a messaging application. It has evolved into a primary

MANUFACTURING Q1 I 2026 : INDUSTRY REPORT
2026-02-24
MANUFACTURING Q1 I 2026 : INDUSTRY REPORT

EXECUTIVE SUMMARY The CYFIRMA Industry Report delivers original cybersecurity insights and telemetry-driven

Converging Threat Vectors: Escalating Cyber Risk and Strategic Exposure in Saudi Arabia’s Digital Ecosystem (2025–2026)
2026-02-21
Converging Threat Vectors: Escalating Cyber Risk and Strategic Exposure in Saudi Arabia’s Digital Ecosystem (2025–2026)

Executive Summary Saudi Arabia’s cyber threat landscape between 2025 and early 2026 reflects a convergence

CharlieKirk GRABBER : A PYTHON-BASED INFOSTEALER
2026-02-20
CharlieKirk GRABBER : A PYTHON-BASED INFOSTEALER

EXECUTIVE SUMMARY CharlieKirk Grabber is a Python-based Windows infostealer, designed for rapid credential

Fortnightly Vulnerability Summary
2026-02-17
Fortnightly Vulnerability Summary

Fortnightly Vulnerability Summary CHECK OUT THESE FAST FACTS ON FORTNIGHTLY OBSERVED VULNERABILITIES.

AUTOMOTIVE Q1 I 2026 : INDUSTRY REPORT
2026-02-16
AUTOMOTIVE Q1 I 2026 : INDUSTRY REPORT

EXECUTIVE SUMMARY The CYFIRMA Industry Report delivers original cybersecurity insights and telemetry-driven

TRACKING RANSOMWARE : JAN 2026
2026-02-12
TRACKING RANSOMWARE : JAN 2026

EXECUTIVE SUMMARY The January 2026 Ransomware Threat Report highlights a ransomware ecosystem that

APT Profile – Fancy Bear
2026-02-11
APT Profile – Fancy Bear

Fancy Bear is a well-documented Russian state-sponsored threat actor that has been active since at

TRANSPORT & LOGISTICS Q1 I 2026 : INDUSTRY REPORT
2026-02-09
TRANSPORT & LOGISTICS Q1 I 2026 : INDUSTRY REPORT

EXECUTIVE SUMMARY The CYFIRMA Industry Report delivers original cybersecurity insights and telemetry-driven

LTX Stealer : Analysis of a Node.js–Based Credential Stealer
2026-02-08
LTX Stealer : Analysis of a Node.js–Based Credential Stealer

EXECUTIVE SUMMARY At CYFIRMA, we analyze attacker techniques that rely on legitimate installers and

Re-Emerging Telegram Phishing Campaign Targeting User Authorization Prompts
2026-02-07
Re-Emerging Telegram Phishing Campaign Targeting User Authorization Prompts

INTRODUCTION CYFIRMA has identified an active and evolving Telegram phishing operation that abuses