Cybersecurity Blog

Cybersecurity Research from the Front Lines

Threat research, infrastructure analysis, and operational guidance from the Team Cymru intelligence team, drawn from the global network visibility we maintain across the internet.

Who
Team Cymru's own threat analysts and researchers, writing from the investigations they run.
What
Named threat actors, mapped command-and-control infrastructure, ransomware toolkit teardowns, and the pivot methodology behind them. 150+ posts and counting.
How
Sourced from Team Cymru's own internet-scale network telemetry. We analyze what we see directly, not third-party feeds or aggregated reporting.
When
New analysis every week, plus rapid posts when a campaign breaks.
Why
So defenders get operational detail they can act on inside a SOC or intel workflow. Published in full, with no gate and no registration wall.
Filter
Sorted Newest first
tcblogposts
3
min read

High Vulnerability in OpenSSL 3.0

Attack Surface & Exposure Visibility
November 2, 2022
Stay informed about the high vulnerability in OpenSSL 3.0 with our latest blog post. Understand the impact on security and protect your technology company.
S2 Research Team
10
min read

A Visualizza into Recent IcedID Campaigns:

Threat Actor, Campaign & Infrastructure Intelligence
October 7, 2022
In this blog post we examine recent trends in IcedID / BokBot campaigns, looking at activity for a one-week period in September 2022.
tcblogposts
5
min read

Team Cymru Myth vs Fact

Threat Reports & Intelligence Briefings
September 26, 2022
Separating myths from facts with Team Cymru. Learn the truth about cybersecurity and internet security with insights from a leading technology company.
S2 Research Team
8
min read

Seychelles, Seychelles, on the C(2) Shore

Threat Actor, Campaign & Infrastructure Intelligence
September 10, 2022
Explore the beauty of Seychelles and its C(2) Shore with our technology company. Discover the perfect blend of nature and innovation on this breathtaking island.
S2 Research Team
5
min read

Mythic Case Study: Assessing Common Offensive Security Tools

Threat Actor, Campaign & Infrastructure Intelligence
September 6, 2022
Discover how a leading technology company evaluates common offensive security tools in this insightful mythic case study. Dive into the world of cybersecurity!
tcblogposts
6
min read

An Analysis of Infrastructure linked to the Hagga Threat Actor

Threat Actor, Campaign & Infrastructure Intelligence
July 12, 2022
Discover how infrastructure analysis is crucial in understanding and combating the Hagga threat actor. Uncover insights for your technology company's security.
S2 Research Team
5
min read

The Sliding Scale of Threat Actor Sophistication When Reacting to 0-day Vulnerabilities

Threat Actor, Campaign & Infrastructure Intelligence
June 29, 2022
Explore the nuanced world of threat actor sophistication in response to 0-day vulnerabilities. Learn how technology companies can navigate this critical landscape.
Bablosoft: how a free browser automation framework lowers the barrier of entry for malicious actors
S2 Research Team
4
min read

Bablosoft; Lowering the Barrier of Entry for Malicious Actors

Threat Reports & Intelligence Briefings
May 25, 2022
Explore how Bablosoft is disrupting the tech industry, making it easier for malicious actors to enter. Learn how this technology company is changing the game.
S2 Research Team
6
min read

Sliver Case Study: Assessing Common Offensive Security Tools

Malware & Ransomware Analysis
May 3, 2022
Explore our in-depth case study on assessing common offensive security tools, perfect for technology companies seeking to bolster their defense strategies.
S2 Research Team
4
min read

MoqHao Part 2: Continued European Expansion

Threat Actor, Campaign & Infrastructure Intelligence
April 7, 2022
Discover how MoqHao, a leading technology company, is continuing its European expansion in Part 2 of our blog series. Learn about their latest strategies and growth.
S2 Research Team
4
min read

Raccoon Stealer – An Insight into Victim “Gates”

Malware & Ransomware Analysis
March 23, 2022
Uncover the cunning tactics of the Raccoon Stealer and its impact on the tech industry.
10
min read

Record breaking DDoS Potential Discovered: CVE-2022-26143

Threat Hunting & Detection Engineering
March 8, 2022
Discover how the CVE-2022-26143 vulnerability could lead to record-breaking DDoS attacks, and what it means for the cybersecurity landscape.

Stay in the loop

Stay current with Team Cymru insights

Get the latest research, articles, and threat intelligence resources, delivered straight to your inbox.

Engage with Team Cymru and the Threat Intelligence Community

Connect with the global defender community and stay current with Team Cymru research, events, and news.

CommunityJoin the defender community.Where threat hunters, CSIRTs, and security operators share intelligence and build defense-in-depth together.Connect with defenders EventsMeet defenders in person.Team Cymru hosts RISE regional conferences and the annual Underground Economy gathering for vetted defenders.See upcoming events WebinarsWatch expert sessions.On-demand webinars from Team Cymru analysts and invited practitioners on threat intelligence and defender operations.Watch the webinars PodcastHear long-form conversations.Future of Threat Intelligence: conversations with security leaders and researchers shaping the next generation of defense.Hear the conversations Press ReleasesGet it from the source.Company announcements, product launches, partnerships, and operational milestones, straight from Team Cymru.Read press releases