This threat actor typically targets healthcare providers using cracked applications as their initial access vector. Based on code similarities and infrastructure overlap, we can attribute...

Based on the attack pattern, we've enhanced our CASB with additional custom alert. We've established log review to monitor for any signs of advanced persistent threat during remediation. The...

This threat actor typically targets admin accounts using tax-related documents as their initial access vector. We've analyzed samples from this campaign and found DNS tunneling being used to...