Self Assessment

Archives: Out of Band

Blank Grabber Returns With High Evasiveness
2023-07-06
Blank Grabber Returns With High Evasiveness

EXECUTIVE SUMMARY The CYFIRMA research team has identified an infostealer builder known as ‘Blank

WISE REMOTE Stealer Unleashed : Unveiling Its Multifaceted Malicious Arsenal
2023-07-05
WISE REMOTE Stealer Unleashed : Unveiling Its Multifaceted Malicious Arsenal

EXECUTIVE SUMMARY Information stealers remain an enduring and evolving security concern for individuals

CHINA IP THEFT REPORT
2023-06-30
CHINA IP THEFT REPORT

EXECUTIVE SUMMARY The loss of intellectual property (IP) through cyber espionage and cyber crime constitutes

Beyond Search Results: Deconstructing SEO Poisoning Technique & Safeguarding Measures
2023-06-29
Beyond Search Results: Deconstructing SEO Poisoning Technique & Safeguarding Measures

EXECUTIVE SUMMARY At Cyfirma, we are dedicated to providing you with up-to-date information on the

Research Report : Zero Day Shop
2023-06-24
Research Report : Zero Day Shop

EXECUTIVE SUMMARY The CYFIRMA research team has identified a new marketplace run by unknown threat

Typosquatting Unmasked : Exposing the Threats of Misplaced Keystrokes
2023-06-22
Typosquatting Unmasked : Exposing the Threats of Misplaced Keystrokes

EXECUTIVE SUMMARY At Cyfirma, our mission is to keep you informed about the latest and common prevailing

DoNot APT Elevates its Tactics by Deploying Malicious Android Apps on Google Play Store
2023-06-16
DoNot APT Elevates its Tactics by Deploying Malicious Android Apps on Google Play Store

EXECUTIVE SUMMARY The team at CYFIRMA recently obtained suspicious Android apps hosted on the Google

Mystic Stealer – Evolving “stealth” Malware
2023-06-15
Mystic Stealer – Evolving “stealth” Malware

EXECUTIVE SUMMARY Information stealers pose an ongoing and dynamic threat to the security of both

Unveiling DeltaBoys : Interview about their Past and Motivation.
2023-06-09
Unveiling DeltaBoys : Interview about their Past and Motivation.

INTRODUCTION Recently CYFIRMA published a report on the new threat actor group DeltaBoys. In a follow-up,

Unveiling an Authenticated Stored Cross-Site Scripting Zero-Day Vulnerability in PowerPress Plugin 10.2.3 and Earlier
2023-06-07
Unveiling an Authenticated Stored Cross-Site Scripting Zero-Day Vulnerability in PowerPress Plugin 10.2.3 and Earlier

EXECUTIVE SUMMARY This research report examines a security vulnerability discovered in the Blubrry

G7 Summit Assessment Report – Strong Symbolism, Military Commitments and Relations with China
2023-06-02
G7 Summit Assessment Report – Strong Symbolism, Military Commitments and Relations with China

EXECUTIVE SUMMARY The Group of Seven (G7) singled out China on issues including Taiwan; non-market

DeltaBoys : Black Hats On The Rise
2023-05-28
DeltaBoys : Black Hats On The Rise

EXECUTIVE SUMMARY CYFIRMA research team has identified a new threat actor group on the rise with the

The Meaning of ETLM for the Coming Ukrainian Offensive
2023-05-22
The Meaning of ETLM for the Coming Ukrainian Offensive

EXECUTIVE SUMMARY Year and a half in the Russian war in Ukraine, the defending Ukranians are now reconstituting

Evolution of KILLNET from Hacktivism to Private Hackers Company and the Role of Sub-groups
2023-05-12
Evolution of KILLNET from Hacktivism to Private Hackers Company and the Role of Sub-groups

INTRODUCTION KILLNET is a prominent pro-Russian ‘hacktivist’ group that has been operating actively

Exploiting the PowerPress 10.0 Stored Cross-Site Scripting Vulnerability (CVE-2023-1917)
2023-05-06
Exploiting the PowerPress 10.0 Stored Cross-Site Scripting Vulnerability (CVE-2023-1917)

EXECUTIVE SUMMARY The PowerPress plugin, which allows WordPress users to publish and manage podcasts,

Breaking the Barrier: The Impact of Unauthorized Access to Powerful AI Language Models like ChatGPT
2023-04-28
Breaking the Barrier: The Impact of Unauthorized Access to Powerful AI Language Models like ChatGPT

EXECUTIVE SUMMARY OpenAI has recently launched new plugins for ChatGPT, which is a language model

DoNot APT Targets Individuals in South Asia using Android Malware
2023-04-14
DoNot APT Targets Individuals in South Asia using Android Malware

EXECUTIVE SUMMARY Recently CYFIRMA observed a cyber-attack on an individual residing in Kashmir, India.

SarinLocker Ransomware
2023-04-10
SarinLocker Ransomware

EXECUTIVE SUMMARY Research team at CYFIRMA has recently identified and published a report on a new

ARES Leaks – Emerging Cyber Crime Cartel
2023-04-07
ARES Leaks – Emerging Cyber Crime Cartel

INTRODUCTION As part of CYFIRMA Research team’s continuous external threat landscape monitoring

The Rise of FusionCore An Emerging Cybercrime Group from Europe
2023-04-03
The Rise of FusionCore An Emerging Cybercrime Group from Europe

EXECUTIVE SUMMARY The CYFIRMA research team has identified a new up-and-coming European threat actor