The DFIR Report · Scour

Flash Alert: EtherRat and TukTuk C2 End in The Gentleman Ransomware

thedfirreport.com·1w

Bissa Scanner Exposed: AI-Assisted Mass Exploitation and Credential Harvesting

thedfirreport.com·4w

Apache ActiveMQ Exploit Leads to LockBit Ransomware

thedfirreport.com·12w

Cat’s Got Your Files: Lynx Ransomware

thedfirreport.com·22w

Cat’s Got Your Files: Lynx Ransomware

thedfirreport.com·26w

From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion

thedfirreport.com·33w

Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs

thedfirreport.com·36w

From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira

thedfirreport.com·41w

KongTuke FileFix Leads to New Interlock RAT Variant

thedfirreport.com·44w

Hide Your RDP: Password Spray Leads to RansomHub Deployment

thedfirreport.com·46w

Another Confluence Bites the Dust: Falling to ELPACO-team Ransomware

thedfirreport.com·52w

Navigating Through The Fog

thedfirreport.com·55w

Fake Zoom Ends in BlackSuit Ransomware

thedfirreport.com·59w

Confluence Exploit Leads to LockBit Ransomware

thedfirreport.com·64w

Cobalt Strike and a Pair of SOCKS Lead to LockBit Ransomware

thedfirreport.com·68w

The Curious Case of an Egg-Cellent Resume

thedfirreport.com·76w

Inside the Open Directory of the “You Dun” Threat Group

thedfirreport.com·81w

Log in to enable infinite scrolling