Products

< Products

Partners

< Partners

Resources

< Resources

Why ThreatDown

< Why ThreatDown

Home > Blog

Threat Intelligence

animal mouse next to a computer mouse

KONNI evolves into stealthier RAT

7 minutes

Microsoft is now disabling Excel 4.0 macros by default

3 minutes

North Korea’s Lazarus APT leverages Windows Update client, GitHub in latest campaign

Threat Intelligence Team

12 minutes

Patchwork APT caught in its own web

Threat Intelligence Team

3 minutes

What is IP sniffing?

3 minutes

SideCopy APT: Connecting lures to victims, payloads to infrastructure

Threat Intelligence Team

14 minutes

TrickBot helps Emotet come back from the dead

1 minute

A multi-stage PowerShell based attack targets Kazakhstan

A multi-stage PowerShell based attack targets Kazakhstan

5 minutes

What is fileless malware?

3 minutes

Windows 11 is out. Is it any good for security?

6 minutes

[updated] Windows MSHTML zero-day actively exploited, mitigations required

6 minutes

New variant of Konni malware used in campaign targetting Russia

New variant of Konni malware used in campaign targetting Russia

12 minutes

RDP brute force attacks explained

6 minutes

map of Crimea

Crimea “manifesto” deploys VBA Rat using double attack vectors

11 minutes

AvosLocker enters the ransomware scene, asks for partners

AvosLocker enters the ransomware scene, asks for partners

10 minutes

The life and death of the ZeuS Trojan

Threat Intelligence Team

5 minutes

Remcos RAT delivered via Visual Basic

Remcos RAT delivered via Visual Basic

19 minutes

Cobalt Strike

Cobalt Strike, a penetration testing tool abused by criminals

Threat Intelligence Team

6 minutes

Kimsuky APT continues to target South Korean government using AppleSeed backdoor

Kimsuky APT continues to target South Korean government using AppleSeed backdoor

12 minutes

Revisiting the NSIS-based crypter

Threat Intelligence Team

9 minutes