Resources

Resources and Insights

The latest industry news, interviews, technologies, and resources.

Research 2024-03-05

A Ransomware That Doesn’t Extort Money WinDestroyer & Its Origin

EXECUTIVE SUMMARY The CYFIRMA research team has identified a destructive malware; WinDestroyer. The ransomware lacks ransom demands, pointing to non-financial motivation. This sophisticated threat employs advanced techniques, such as DLL…

Research 2024-03-05

Exploiting Document Templates: Stego-Campaign Deploying Remcos RAT and Agent Tesla

EXECUTIVE SUMMARY At CYFIRMA, our commitment is to provide timely insights into prevalent threats and malicious tactics affecting both organizations and individuals. Our research team recently identified a malicious .docx…

News 2024-02-29

Weekly Intelligence Report – 01 Mar 2024

Ransomware of the Week CYFIRMA Research and Advisory Team would like to highlight ransomware trends and insights gathered while monitoring various forums. This includes multiple - industries, geography, and technology…

Research 2024-02-29

The ScreenConnect Saga: A Deep Dive into the LockBit Connection

THE SCREENCONNECT SAGA: A DEEP DIVE INTO THE LOCKBIT CONNECTION In the ever-evolving landscape of cybersecurity threats, a recent storm has been brewing around ConnectWise's remote support software, ScreenConnect. The…

Research 2024-02-28

Exploit Analysis: SSRF and Command Injection for Unauthenticated RCE in Ivanti Connect Secure

EXECUTIVE SUMMARY CYFIRMA’s Research team conducted a comprehensive analysis of a server-side request forgery (SSRF) vulnerability CVE-2024-21893 and a command injection vulnerability CVE-2024-21887, affecting Ivanti Connect Secure. Discovered on January…

Datasheet 2024-02-27

Swimlane and DeCYFIR Integration

DeCYFIR threat intelligence models empower businesses to make informed decisions on threats and prioritize remediation activities. DeCYFIR helps organizations uncover potential attack surfaces, deliver vulnerability and brand intelligence, monitor for…