Category : Research&Intelligence

Secureworks® Counter Threat Unit™ (CTU) researchers identified indexes of multiple unsecured internet-facing Elasticsearch databases replaced with a ransom note. The note demands a Bitcoin payment...

Secureworks® Counter Threat Unit™ (CTU) researchers are investigating attacks by the Iranian COBALT MIRAGE threat group, which has been operating since at least June 2020....

Updated samples indicate access to original source code and active development, signaling that GOLD SOUTHFIELD has resumed operations. Monday, May 9, 2022 By: Counter Threat...

Government-sponsored threat actors collect intelligence to benefit their country, and changes to the political landscape can impact the collection requirements. The war in Ukraine has...

Leaks of GOLD ULRICK communications and operational details have not hampered ransomware activity. Thursday, April 21, 2022 By: Counter Threat Unit Research Team Secureworks® Counter...

Since February 27, 2022, the Twitter @ContiLeaks account and other online personas have been leaking communications containing details about threat actors and their operations. The...

Secureworks® Counter Threat Unit™ (CTU) researchers observed multiple malicious Microsoft Excel add-ins delivering JSSLoader malware. JSSLoader is a remote access trojan (RAT) that was first...

Secureworks® Counter Threat Unit™ (CTU) researchers investigated a Computer Emergency Response Team of Ukraine (CERT-UA) warning of phishing activity posted to Facebook on February 25,...

Q. Do you anticipate other threat actors not related to Russia using this situation as a smokescreen? Potentially. We believe the most likely ongoing high...

Secureworks® Counter Threat Unit™ (CTU) researchers are investigating reports of disruptive activity that began targeting organizations in Ukraine on February 23, 2022. This activity mirrors...