Akira ransomware’s secret weapon—AnyDesk
The Akira ransomware group drops the AnyDesk client to gain persistence.
2 minutes
mdr
Is it an attacker or an IT admin? Test your skills in two minutes…
Are you a security n00b or a Certified Threat Hunter? Take our quiz and put yourself to the test!
7 minutes
New phishing campaign uses Discord for payload delivery
A new phishing campaign uses two Discord CDN's to host malicious executables.
3 minutes
Rhysida using Oyster Backdoor to deliver ransomware
In a recent attack, Rhysida used a new variant of the Oyster backdoor, also known as Broomstick.
3 minutes
Credential Dumping: How ransomware gangs steal login data and how to detect it
Get the ins and outs of Credential Dumping.
5 minutes
How the world’s worst ransomware gang avoids detection
Look at a real example of how LockBit used LOTL techniques on a ThreatDown MDR client.
4 minutes
From weeks to hours: Why ransomware attacks are getting quicker
Businesses will need to adapt as ransomware gangs take less time to steal and encrypt data than ever before.
4 minutes
US gov bans Kaspersky sales and updates, says “switch to an alternative” immediately
A "significant number" of US companies have just three months to find alternative endpoint protection.
1 minute
Anything but science fiction: The anatomy of an Akira ransomware attack
An analysis of a real life Akira ransomware attack.
3 minutes
5 early signs of a ransomware attack (based on real examples)
Spot the five early signs of ransomware gangs moving laterally through your network.
4 minutes
K-12 district hit with $500k Medusa ransomware attack
The Medusa ransomware gang claims it has stolen 1.2 TB of data from a large K-12 district.
1 minute
Day in the life of a ThreatDown MDR analyst: Stopping a live ransomware infection
Walk through a ransomware infection from the POV of an MDR analyst.
4 minutes
Cybercrime Has Gone Machine-Scale
AI is automating malware faster than security can adapt.
Get the facts Read the 2026 State of Malware