Threat Research

Explore Secure Blink's Threat Research. In-depth analysis on ransomware, malware families, and APT groups. Stay ahead with actionable insights.

Linux

Golamg

GobRAT Malware: A Golang-Based Threat Targeting Linux Routers

GobRAT is a sophisticated malware that poses a significant threat to Linux routers. With its unique characteristics and mode of operation, GobRAT has gained attention in the cybersecurity community...

29-May-2023

5 min read

APT

Evolution of Reconnaissance Capabilities: Kimsuky's Global Campaign

Learn about Kimsuky's use of ReconShark, their global campaign implications, and effective countermeasures to protect your digital environment....

23-May-2023

3 min read

WordPress

Malware

Balada Injector: A Massive Ongoing WordPress Malware Campaign

Balada Injector: A Comprehensive Threat Research on Ongoing WordPress Malware Campaign. Learn about the code scripts, IoCs, and in-depth technical analysis......

24-Apr-2023

3 min read

Ransomware

Dark Power Ransomware: New Double Extortion Tactics

Discover the new Dark Power ransomware threat and learn how to protect your systems. Our threat research reveals its origin, behavior, and IoCs...

27-Mar-2023

7 min read

IoT Devices

Botnet

Mirai

Mirai Botnet: How IoT Devices Almost Brought Down The Internet

Learn about the MIRAi botnet and its devastating impact on IoT devices. Understand how to protect your devices and networks from this dangerous malware....

25-Mar-2023

3 min read

Watering Hole

Backdoor

North Korea

WhiskerSpy: New Backdoor Spread via Watering Hole Attack by Earth Kitsune

WhiskerSpy: A new backdoor malware disguised as browser extensions propagating via Watering Hole attack targeting users in Russia, Belarus, & Ukraine...

23-Feb-2023

4 min read

Linux

BOLDMOVE: New Linux Malware Discovered in China-based Espionage Targeting FortiO...

BOLDMOVE is a new Linux-based malware discovered in a China-based cyber espionage campaign that targets FortiOS devices. The malware is used to maintain persistence on exploited devices by patching the FortiOS logging processes and disabling logging altogether....

25-Jan-2023

6 min read

Malware

Shagle

StrongPity APT After Android Users with Trojanized Telegram App

Learn about the StrongPity APT group's latest espionage campaign targeting Android users with a trojanized Telegram app disguised as the Shagle chat app......

19-Jan-2023

7 min read

Malware

SSH

MCCrash Malware: A Cross-Platform Botnet Targeting SSH-Enabled Devices

Analysis of MCCrash cross-platform botnet that targets Windows & Linux devices, as well as IoT devices, via insecure SSH settings. It launches DDoS attacks against private Minecraft servers... ...

23-Dec-2022

6 min read