Modern supply chain intrusions are attacks that compromise trusted software development systems, including CI/CD pipelines, package registries, GitHub repositories, developer tools, and cloud envir...
Recently, during one of our threat hunting operations, our squad identified multiple malicious domains impersonating major Egyptian service providers, including Fawry, the Egypt Post, and Careem. T...
MuddyWater, a long-running Iranian cyber-espionage group affiliated with Iran’s Ministry of Intelligence and Security (MOIS), has established itself as one of the most persistent state-backed threa...
Executive Summary The arrest and extradition of an alleged Scattered Spider member drew attention for more than the charges themselves. The most revealing detail appeared inside the court document...
Crypto Money Laundering: Definition, Stages, and Common Techniques Money laundering is the process of concealing illegally obtained funds to make them appear legitimate. In crypto, laundering has ...
Ransomware is no longer just a malicious program deployed by a single attacker — it has evolved into a complex, profit-driven ecosystem operating much like a legitimate business model. Today’s rans...
Executive Summary APT35, also known as Magic Hound and Charming Kitten, is an Iranian state-backed cyber espionage group active since at least 2014. The threat actor is known for strategic intelli...
Recently observed an uptick in threat actors abusing RMM tools for initial access via phishing. I decided to investigate several popular RMMs — AnyDesk, ConnectWise ScreenConnect, and **Atera **— a...
Executive Summary Conti ransomware, first identified in 2019, quickly became one of the most notorious ransomware operations due to its advanced encryption, rapid lateral movement, and use of doub...
Introduction digital analytics tools—such as link shorteners, location trackers, CAPTCHAs, and advertising networks—are essential to the modern digital ecosystem. They help system administrators i...