Threat Research

Explore Secure Blink's Threat Research. In-depth analysis on ransomware, malware families, and APT groups. Stay ahead with actionable insights.

Linux

FontOnLake

FontOnLake Malware: Undocumented Malware Family Activity Targeting Linux Machine...

FontOnLake, a new malware discovered by ESET researchers that leverages custom modules in targeting Linux systems; their advanced design indicates that they might be used for targeted attacks......

13-Oct-2021

6 min read

Botnet

Mozi

DNS Spoofing

Mozi P2P Botnet evolved, executed new capabilities to target its victims traffic

Modified Mozi P2P Botnet implemented new capabilities to target its victim's web traffic via MITM and DNS Spoofing attacks...

21-Aug-2021

3 min read

QNAP

Qlocker

Ransomware

QLocker Ransomware

Qlocker, an infamous ransomware rise in prominence after victimizing the QNAP NAS storage, uses 7-zip to move files into password-protected archives......

28-Jul-2021

3 min read

Trojan

Qakbot

Emotet

Qakbot: An infamous Banking Trojan Family

Qakbot creates a specialized phishing e-mail that incorporates an Office document in the mail content...

22-Jun-2021

4 min read

Zero-Day

Google

Counterterrorism

Google took down the hacking attack as a counterterrorism operation in disguise

Western Government operatives found to be actively conducting a counterterrorism operation for the past nine months discovered by Google as a hacking attack...

28-Mar-2021

8 min read

Vulnerability

SHAREIt: Unpatched Vulnerability Targeting To Remote Code Execution

SHAREit the infamous peer-to-peer file transfer app, mostly familiar for leaking its user data and maliciously spying on them, was recently identified to be occupied with numerous patched vulnerabilities...

18-Feb-2021

11 min read

Cyberespionage

Winnti or Higaisa resurrected from APT41 Backdoor

Winnti' a cyberespionage group from the Chinese origins primarily identified for targeting software companies and political organisations worldwide, gained traction over a series of cyberattacks...

20-Jan-2021

15 min read

Solarwinds

Solarwinds Hack: Why it is not like any other cyberattack

Solarwinds, a SaaS-based firm known for their IT & Network management solutions, was spotted under the radar of a manual supply chain attack....

11-Jan-2021

4 min read

vulnerability

Zerologon

Zerologon vulnerability

Zerologon is the name that has been given to a vulnerability identified in CVE-2020-1472. It’s called zerologon due to the flaw in the logon process where the initialisation vector (IV) is set to all zeros all the time while an Initialisation Vector (IV) should always be a random number...

18-Nov-2020

7 min read