Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

Filter by company: All Intel Recorded Future Kaseya

• Muddying the Tracks: The State-Sponsored Shadow Behind Chaos Ransomware

  Rapid7 Blog

  T1105 99% T1132.001 99% T1486 98%
  10 hours ago
• Researchers warn millions of RDP and VNC servers are wide open to exploitation

  IT Pro

  T1021.001 98% T1190 55% T1210 38%
  5 days ago
• ThreatsDay Bulletin: SMS Blaster Busts, OpenEMR Flaws, 600K Roblox Hacks and 25 More Stories

  The Hacker News

  T1056.001 99% T1195.001 99% T1190 97%
  6 days ago
• Komari Red: The Monitoring Tool with a Built-in Reverse Shell

  Huntress

  T1003.002 98% T1021.002 95% T1021.001 88%
  6 days ago
• PhantomCore Exploits TrueConf Vulnerabilities to Breach Russian Networks

  The Hacker News

  T1505.003 100% T1566.002 93% T1059.001 69%
  2026-04-27
• UNC6692 Impersonates IT Help Desk via Microsoft Teams to Deploy SNOW Malware

  The Hacker News

  T1684.001 96% T1021.006 95% T1566.004 83%
  2026-04-23
• Cyber Hygiene Best Practices: Essential Security Checklist

  Huntress

  T1021.001 93% T1078 90% T1563.002 66%
  2026-04-23
• IR Trends Q1 2026: Phishing reemerges as top initial access vector, as attacks targeting public administration persist

  Cisco Talos Intelligence

  T1021.001 99% T1486 96% T1556.006 86%
  2026-04-22
• DFIR Report – The Gentlemen & SystemBC: A Sneak Peek Behind the Proxy

  Check Point Research

  T1053.005 100% T1490 100% T1486 100%
  2026-04-20
• Untangling a Linux Incident With an OpenAI Twist

  Huntress

  T1059.004 97% T1496 75% T1543.002 72%
  2026-04-17
• Just 21 IP Addresses Are Now Behind Nearly Half of All RDP Scanning on the Internet

  GreyNoise

  T1021.001 67%
  2026-04-10
• Iranian-Affiliated APT Targeting of Rockwell/Allen-Bradley PLCs

  Censys

  T1190 93% T1021.001 51% T1588.006 42%
  2026-04-08
• Decoding NightSpire: Ransomware IOCs Aren't Set in Stone

  Huntress

  T1486 100% T1219 86% T1080 76%
  2026-04-07
• Ransomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat Landscape

  Mandiant

  T1486 100% T1219 100% T1112 99%
  2026-03-16
• Web Shells, Tunnels, and Ransomware: Dissecting a Warlock Attack

  Trend Micro Research

  T1059.001 99% T1055.001 98% T1567.002 97%
  2026-03-16
• How the Huntress SOC Stopped a VPN-Based Ransomware Attack

  Huntress

  T1486 78% T1078 72% T1021.001 70%
  2026-03-13
• “Handala Hack” – Unveiling Group’s Modus Operandi

  Check Point Research

  T1485 97% T1588.002 96% T1486 92%
  2026-03-12
• Unmasking an Attack Chain of MuddyWater

  Huntress

  T1059.001 96% T1071 57% T1021.001 43%
  2026-03-06
• Proactive Preparation and Hardening Against Destructive Attacks: 2026 Edition

  Mandiant

  T1021.001 99% T1021.006 99% T1649 93%
  2026-03-06
• Apache ActiveMQ Exploit Leads to LockBit Ransomware

  The DFIR Report

  T1190 100% T1021.001 100% T1486 99%
  2026-02-23
• Cat’s Got Your Files: Lynx Ransomware

  The DFIR Report

  T1486 100% T1046 100% T1135 98%
  2025-12-17
• Threats Plague Educational Organizations

  Huntress

  T1110 92% T1567.002 82% T1657 81%
  2025-11-13
• Looking Through a Pinhole at a Qilin Ransomware Attack

  Huntress

  T1219 99% T1486 97% T1021.001 75%
  2025-10-22
• From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion

  The DFIR Report

  T1218.011 100% T1055.001 100% T1555.003 99%
  2025-09-29
• How EDR Telemetry Powers Managed Investigations

  Huntress

  T1021.001 96% T1486 89% T1078 80%
  2025-09-22
• Unmasking The Gentlemen Ransomware: Tactics, Techniques, and Procedures Revealed

  Trend Micro Research

  T1489 100% T1486 99% T1059.001 99%
  2025-09-09
• Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs

  The DFIR Report

  T1003.001 100% T1046 99% T1021.001 99%
  2025-09-08
• Commonly Abused Administrative Utilities: A Hidden Risk to Enterprise Security

  Black Hills InfoSec

  T1059.001 100% T1218.010 99% T1021.001 98%
  2025-08-27
• Nearly 2,000 Malicious IPs Probe Microsoft Remote Desktop After Single-Day Surge

  GreyNoise

  T1021.001 97% T1110.004 76% T1110.003 54%
  2025-08-25
• Kawabunga, Dude, You’ve Been Ransomed!

  Huntress

  T1486 99% T1021.001 97% T1080 87%
  2025-08-14
• Crypto24 Ransomware Group Blends Legitimate Tools with Custom Malware for Stealth Attacks

  Trend Micro Research

  T1056.001 100% T1486 99% T1021.001 95%
  2025-08-14
• Netcat (nc) Cheatsheet

  Black Hills InfoSec

  T1046 98% T1021.001 52% T1572 33%
  2025-08-06
• Oops Safari, I think You Spilled Something!

  Exodus Intelligence

  T1055.001 98% T1112 70% T1573.002 52%
  2025-08-04
• Information to Insights: Intrusion Analysis Methodology

  Huntress

  T1021.001 99% T1110 98% T1003.001 97%
  2025-07-30
• Remote Monitoring and Management Tools | Huntress

  Huntress

  T1486 99% T1219 98% T1080 85%
  2025-07-17
• KongTuke FileFix Leads to New Interlock RAT Variant

  The DFIR Report

  T1059.001 100% T1087.002 96% T1059.003 96%
  2025-07-14
• Hide Your RDP: Password Spray Leads to RansomHub Deployment

  The DFIR Report

  T1078 100% T1486 99% T1003.001 99%
  2025-06-30
• How Huntress Addresses Lateral Movement

  Huntress

  T1021.001 97% T1003.001 92% T1021.006 92%
  2025-06-12
• Boring Isn't Harmless: Common Cyberattack Tradecraft Risks | Huntress

  Huntress

  T1110 99% T1133 98% T1588.002 71%
  2025-06-05
• Another Confluence Bites the Dust: Falling to ELPACO-team Ransomware

  The DFIR Report

  T1003.001 100% T1021.001 99% T1021.002 99%
  2025-05-19
• Time to Ransom is Money

  Huntress

  T1003.001 100% T1486 98% T1550.002 81%
  2025-05-13
• Utilizing ASNs for Hunting & Response

  Huntress

  T1021.001 99% T1078.004 90% T1078 87%
  2025-05-08
• The organizational structure of ransomware threat actor groups is evolving before our eyes

  Coveware

  T1190 99% T1486 98% T1657 94%
  2025-05-01
• Tales of Too Many RMMs

  Huntress

  T1219 99% T1021.001 88% T1486 56%
  2025-04-17
• Ransomware Initial Access Brokers Exposed

  Huntress

  T1110 97% T1003.001 90% T1486 88%
  2025-04-10
• Cyber Hygiene Threats: RDP, VPNs & Remote Tool Risks | Huntress

  Huntress

  T1078 90% T1021.001 64% T1133 40%
  2025-04-04
• Securing Endpoints from Common Vulnerabilities

  Huntress

  T1021.001 97% T1219 95% T1566.002 70%
  2025-03-28
• Untold Tales from Tactical Response | Huntress

  Huntress

  T1078 92% T1021.006 86% T1059.001 82%
  2025-03-10
• Detect and Eliminate Persistent Malware Before It Wreaks Havoc | Huntress

  Huntress

  T1078 88% T1021.001 81% T1219 78%
  2025-03-07
• Attack Tactics 9: Shadow Creds for PrivEsc w/ Kent & Jordan

  Black Hills InfoSec

  T1572 98% T1557.001 88% T1021.001 87%
  2025-01-20