Threat Research

Explore Secure Blink's Threat Research. In-depth analysis on ransomware, malware families, and APT groups. Stay ahead with actionable insights.

Malware

Shagle

StrongPity APT After Android Users with Trojanized Telegram App

Learn about the StrongPity APT group's latest espionage campaign targeting Android users with a trojanized Telegram app disguised as the Shagle chat app......

19-Jan-2023

7 min read

Malware

SSH

MCCrash Malware: A Cross-Platform Botnet Targeting SSH-Enabled Devices

Analysis of MCCrash cross-platform botnet that targets Windows & Linux devices, as well as IoT devices, via insecure SSH settings. It launches DDoS attacks against private Minecraft servers... ...

23-Dec-2022

6 min read

Malware

Infostealer

Ducklogs

Ducklogs: A Malware-as-a-Service Comes With Multifold Functionalities

Ducklogs Malware-as-a-Service offers functionality to steal & exfiltrate user data from compromised systems…

17-Dec-2022

3 min read

Discord

Ransomware

AxLocker: A new wave of ransomware attacks targeting Discord Servers

Discord servers credentials are being exploited involving newly emerged ransomware families out of which AxLocker…

21-Nov-2022

4 min read

Dropper

BOMB

Malware

BOMB: A Dropper-Like Malware Actively Spreading In Disguise of Cracks

BOMB, a dropper malware concealed as crack actively circulated following it's dormancy deployed over the targeted system…

16-Nov-2022

3 min read

Amadey

LockBit

Phishing

Amadey Bot: Ransomware Affiliates Spreading LockBit By Phishing Email

LockBit 3.0 Ransomware affiliates acting as a lure with phishing emails to deploy Amadey Bot across infected devices to take control... ...

09-Nov-2022

7 min read

Wanniti

APT41

Spyder Loader

Operation CuckooBees: A sophisticated resurrection to Spyder Loader

Operation CuckooBees resurfaced since its inception in May, involved in a series of attacks targeting IPs of Hong Kong companies by Spyder Loader…...

31-Oct-2022

9 min read

Onion

APT

TOR

OnionPoison: YouTube Channels spreading malicious TOR browsers installers

OnionPoison involved in wild infection chain of TOR Browser installer spread via YouTube channels

21-Oct-2022

10 min read

Twilio

Phishing

EvilProxy

EvilProxy: Scaling Phishing Attacks Keeping MFA At Bay

EvilProxy operators leverage Reverse Proxy & Cookie Injection methods to evade MFA – proxyfying victim’s session...

21-Sep-2022

7 min read

Golang

BianLian

Ransomware

BianLian: A new golan based cross functional ransomware in action

Increases in the command and control infrastructure of the new cross-platform ransomware BianLian this month suggest a quickening of the rate at which it is being developed and deployed......

16-Sep-2022

7 min read