Threat Research

Explore Secure Blink's Threat Research. In-depth analysis on ransomware, malware families, and APT groups. Stay ahead with actionable insights.

Mirai

ShadowV2: Advanced Technical Threat Analysis of a New Mirai-Based Botnet

A new Mirai-based botnet malware called ShadowV2 was indeed active during the major AWS outage on October 20, 2025, with evidence suggesting its operators used the disruption as a test run for future attack...

30-Nov-2025

49 min read

Surveillanceware

Spyrtacus: Italian Surveillanceware Targets Android via Telecom Phishing

SIO's Spyrtacus surveillanceware compromises Android devices via fake apps and cloned Italian telecom sites, stealing communications and media since 2018....

30-Oct-2025

11 min read

OAuthVishing

ShinyHunters: Decentralized Extortion Targets Cloud SaaS at Scale

ShinyHunters: Vishing-led OAuth abuse hits Salesforce; coordinated extortion and data exfiltration target tech, retail, aviation. Defenses and IOCs inside....

04-Sep-2025

33 min read

APT41

Brass Typhoon: Analysing China's Strategic Fusion of Espionage & Crime in Modern...

Comprehensive analysis of Brass Typhoon (APT41/Barium), China's dual-purpose cyber threat actor combining state espionage with cybercrime operations....

16-Aug-2025

12 min read

Blacksuit

BlackSuit Ransomware: Evolution from Royal to $500M Threat

BlackSuit ransomware analysis: Royal's successor demanding $500M+ ransoms. Comprehensive threat intelligence on tactics, victims, and defenses. ...

31-Jul-2025

21 min read

Social Engineering

Scattered Spider: Social Engineering Meets Cloud Ransomware Tactics

Scattered Spider's technical tactics: social engineering, cloud exploits, ransomware ops, and advanced defense evasion

20-May-2025

24 min read

APT

Botnet

Flax Typhoon: Chinese Cyber Espionage Group Infiltrating Critical Infrastructure...

Explore how China's Flax Typhoon group targets global critical infrastructure, using stealthy tactics to conduct cyber espionage and disrupt national security...

28-Jan-2025

7 min read

Spyware

Infostealer

Shocking FireScam Android Malware Telegram Premium Spyware Exposed

Explore an in-depth technical analysis of FireScam—a stealthy Android malware posing as Telegram Premium. Learn about its phishing distribution, multi-stage infection, data exfiltration via Firebase, and effective defense strategies to protect your mobile ecosystem...

09-Jan-2025

9 min read

Fileless Malware

MaaS

RevC2, More_eggs Lite & PSLoramyra: Insights into Advanced Fileless Malware

Explore detailed analysis of advanced fileless malware RevC2, More_eggs Lite, and PSLoramyra. Understand their tactics, IOCs, and protection strategies. ...

06-Dec-2024

24 min read

Encryptor

Interlock: New Cross-Platform Threat Targets Critical Infrastructure with Double...

Interlock ransomware is a cross-platform threat targeting critical infrastructure using double-extortion tactics. Learn about its methods and impacts...

19-Nov-2024

10 min read