Threat Research

Explore Secure Blink's Threat Research. In-depth analysis on ransomware, malware families, and APT groups. Stay ahead with actionable insights.

APT

Backdoor

TA428

CotSam, Never Before Seen Malware linked to TA428 involved in EU attack

CotSam: a never seen before malware strain involved in the targeted attacks across several European & Afghanistan institutions linked to infamous APT group TA428......

09-Aug-2022

7 min read

APT

ToddyCat APT targeting high profile cyberespionage across Europe & Asia

A new APT group, tracked as ToddyCat, to a series of attacks targeting entities in Europe and Asia since at least December 2020...

25-Jun-2022

7 min read

Malware

Backdoor

Linux

BPFDoor an evasive backdoor malware targeting Linux & Solaris systems

BPFDoor is a Linux/Unix backdoor that allows threat actors to remotely connect to a Linux shell to gain complete access to a compromised device... ...

31-May-2022

7 min read

Phishing

Backdoor

Saitama Backdoor: Jordan's Foreign Ministry Targeted by Spear Phishing

FortiGuard Labs attributed the campaign to an Iranian cyber espionage threat actor tracked under the moniker APT34, citing resemblances

13-May-2022

2 min read

Rebrand

Black Basta

Ransomware

Black Basta: a new ransomware group or rebranded ransomware operation

Black Basta, a newly emerged name around the ransomware families, is getting popular across the masses, indicating an attempt to rebrand the previously dissolved ransomware family... ...

03-May-2022

6 min read

Vulnerability

Linux

Root

Nimbuspwn: Linux Endpoint Vulnerabilities allowing Root Privilege Escalation

Microsoft Researchers located previously undiscovered vulnerabilities in Linux systems tracked as Nimbuspwn, if chained together, may provide elevated root access......

28-Apr-2022

7 min read

Trojan

Infostealer

Malware

MetaStealer malware: An improved version of RedLine actively distributed via mal...

MetaStealer, a newly emerged infostealer malware actively circulated via a malspam campaign to steal user credentials & cryptocurrency wallet details…...

25-Apr-2022

1 min read

Ransomware

RaaS

Suncrypt RaaS regained prominence

SunCrypt has failed to grow more significant than a small private RaaS of a closed circle of affiliates.

05-Apr-2022

2 min read

Credentials Stealer

Banking Trojan

Escobar Malware: An emerging threat to stealing credentials from your Phone

Aberebot, Android banking trojan resurrected with a new name as Escobar Trojan with updated features while offering a homage to Colombian Drug Lord......

25-Mar-2022

4 min read

Trojan

Sharkbot

Banking Trojan SharkBot Discovered in anti-virus app on google play

SharkBot an android Trojan was first spotted in October 2021 on google play, it has successfully evaded Google security checks. Security Researcher at NCC and Cleafy found it and marked it one of a kind......

11-Mar-2022

1 min read