Threat Research

Explore Secure Blink's Threat Research. In-depth analysis on ransomware, malware families, and APT groups. Stay ahead with actionable insights.

Malware

Wslink

RSA

Wslink: undocumented malware loader that runs as a server

The research team of ESET has unveiled an undocumented loader for Windows. Its target victims are mainly from Central Europe, North America, and the Middle East... ...

15-Nov-2021

3 min read

Android Malware

TangleBot

COVID-19

TangleBot: The Obscure Android Malware

TangleBot, a newly discovered malware distributed only through android devices, strategically lures users by legitimately appearing SMS Updates regarding COVID19... ...

25-Oct-2021

7 min read

Linux

FontOnLake

FontOnLake Malware: Undocumented Malware Family Activity Targeting Linux Machine...

FontOnLake, a new malware discovered by ESET researchers that leverages custom modules in targeting Linux systems; their advanced design indicates that they might be used for targeted attacks......

13-Oct-2021

6 min read

Botnet

Mozi

DNS Spoofing

Mozi P2P Botnet evolved, executed new capabilities to target its victims traffic

Modified Mozi P2P Botnet implemented new capabilities to target its victim's web traffic via MITM and DNS Spoofing attacks...

21-Aug-2021

3 min read

QNAP

Qlocker

Ransomware

QLocker Ransomware

Qlocker, an infamous ransomware rise in prominence after victimizing the QNAP NAS storage, uses 7-zip to move files into password-protected archives......

28-Jul-2021

3 min read

Trojan

Qakbot

Emotet

Qakbot: An infamous Banking Trojan Family

Qakbot creates a specialized phishing e-mail that incorporates an Office document in the mail content...

22-Jun-2021

4 min read

Zero-Day

Google

Counterterrorism

Google took down the hacking attack as a counterterrorism operation in disguise

Western Government operatives found to be actively conducting a counterterrorism operation for the past nine months discovered by Google as a hacking attack...

28-Mar-2021

8 min read

Vulnerability

SHAREIt: Unpatched Vulnerability Targeting To Remote Code Execution

SHAREit the infamous peer-to-peer file transfer app, mostly familiar for leaking its user data and maliciously spying on them, was recently identified to be occupied with numerous patched vulnerabilities...

18-Feb-2021

11 min read

Cyberespionage

Winnti or Higaisa resurrected from APT41 Backdoor

Winnti' a cyberespionage group from the Chinese origins primarily identified for targeting software companies and political organisations worldwide, gained traction over a series of cyberattacks...

20-Jan-2021

15 min read