Threat Actor Profile: APT34
APT34, also known as OilRig, is a suspected Iranian cyber espionage threat group that has been operational since at least 2014. The group is believed to work on behalf of the Iranian government,…
Threat Actors
Profiles of criminal groups, nation-state operators and emerging clusters: motivations, targeting, tradecraft and ATT&CK mappings.
62 reports
Examining the Johnson-Lebedev Connection & Implications
This report aims to provide an analysis of the relationship between former UK Prime Minister Boris Johnson and Evgeny Lebedev, a media mogul and son of a former KGB agent. The analysis is based on…
Active Exploitation of Zero-Day Vulnerability (CVE-2023-38606) Affecting All Apple Products
The Centre for Cyber Security Belgium (CERT.be) has issued an advisory warning of an actively exploited zero-day vulnerability (CVE-2023-38606) affecting all Apple products. This vulnerability,…
Unmasking the Geopolitical Underpinnings of Ransomware Attacks: A Review
In the ever-evolving field of Cyber Threat Intelligence (CTI), understanding the motivations behind cyber-attacks is paramount for effective threat mitigation and response. While financial gain is…
Threat Actor Profile: APT32
APT32, also known as OceanLotus Group, is a Vietnam-based threat group that has been active since at least 2014. This group is known for its sophisticated attacks on several private companies,…
Bellingcat Story - Creating Impact: A Year On Stop Child Abuse — Trace An Object
In the digital age, the fight against child abuse has taken on new dimensions. One of the most innovative approaches to this issue is the "Stop Child Abuse - Trace an Object" campaign, a unique…
Nokia 2023 Threat Intelligence Report
In the recently released "Threat Intelligence Report 2023" by Nokia, the company provides an in-depth analysis of the current cybersecurity landscape, particularly focusing on telecom networks and…
Analysis of Evasive Panda APT Group's Recent Activities
The Evasive Panda Advanced Persistent Threat (APT) group, also known as BRONZE HIGHLAND and Daggerfly, has been active since at least 2012. This Chinese-speaking APT group has been conducting…
Understanding and Mitigating Insider Threats: A Comprehensive Approach
Insider threats are a significant cybersecurity risk that originates from within an organisation. These threats can come from current or former employees, contractors, or anyone else with intimate…
Threat Actor Profile: APT30
APT30, also known as APT-C-30, is a China-based cyber espionage group that has been active since at least 2005. The group has targeted multiple industries, including the aerospace, government,…
Top 10 Vulnerabilities and Misconfigurations Found by Pen Testers in 2023
In the ever-evolving landscape of cybersecurity, it is crucial to stay updated with the latest vulnerabilities and misconfigurations that threat actors exploit. This article provides a detailed…