Cyble Research and Intelligence (CRIL) Blogs

Android Users in South Korea targeted by spyware linked to Chinese Threat Actor

September 6, 2023 / 11 minutes of reading

Key Takeaways Overview Cyble Research and Intelligence Labs (CRIL) identified a new Android Spyware campaign using VirusTotal intelligence. The campaign has been conducted by a China-linked Threat Actor specifically targeting Android users in South Korea since the beginning of July 2023. This Android Spyware can steal sensitive information, including contacts, SMS messages, call logs, images, …

Android Users in South Korea targeted by spyware linked to Chinese Threat Actor Read More »

Low-profile Threat Actor observed imitating NoEscape Ransomware

September 4, 2023 / 7 minutes of reading

Cyble Research and Intelligence Labs uncovers a possible crafty imitator of the infamous NoEscape Ransomware.

Threat Actors orchestrate cyber-attacks on vulnerable Ivanti products

September 1, 2023 / 4 minutes of reading

Cyble Global Sensor Intelligence Networks observes exploitation of Ivanti Vulnerabilities.

New Remo Android Banking Trojan Targets Over 50 Banking Applications And Crypto Wallets

August 29, 2023 / 8 minutes of reading

CRIL analyzes a newly discovered Remo Android Banking Trojan targeting over 50 banking and cryptocurrency wallet applications from Indonesia, Vietnam, and Thailand.

Steganography, Poweshell, malware, RAT blog

Threat Actor Employs PowerShell-Backed Steganography in Recent Spam Campaigns

August 25, 2023 / 9 minutes of reading

CRIL analyzes a recent spam campaign that utilizes PowerShell-Backed Steganography employed by a threat actor for Malware Dissemination.

Unveiling the Stealthy Exploitation of Microsoft CMSTP Using Malicious LNK Files

August 23, 2023 / 9 minutes of reading

Cyble Research & Intelligence Labs analyzes an infection chain leveraging CMSTP for executing malware payloads.

Cyble is now a Series B company. Learn More

Android Users in South Korea targeted by spyware linked to Chinese Threat Actor

Low-profile Threat Actor observed imitating NoEscape Ransomware

Threat Actors orchestrate cyber-attacks on vulnerable Ivanti products

New Remo Android Banking Trojan Targets Over 50 Banking Applications And Crypto Wallets

Threat Actor Employs PowerShell-Backed Steganography in Recent Spam Campaigns

Unveiling the Stealthy Exploitation of Microsoft CMSTP Using Malicious LNK Files

Quick Links

Products

Solutions

Privacy Policy