We curate threat intelligence to provide situational awareness and actionable insights
Threat Identifier Detections
Atomic detections that serve as the foundation of our detection framework.
Threat Scenario Detections
Risk, pattern, and sequence-based detections utilizing the outputs of Threat Identifiers as a means of identifying actual threats.
Reports Hot Off the Forge
• Threat News Reports
• Trending Threat Reports
• ResearchArticles
Forge Report: First Half Threat Trends of 2024
Featured Threat Reports
All Threat Reports
HHS Warns of Advanced Phishing Techniques Endangering Healthcare Data
The HHS warns of advanced phishing attacks within the healthcare sector, targeting IT help desks to bypass security protocols like MFA. Utilizing detailed personal data and sophisticated tactics like AI voice cloning, these attacks pose significant threats to healthcare data security and financial integrity.
Signs of AI In PowerShell Script Distributing Rhadamanthys Stealer
Proofpoint reveals AI's influence in a PowerShell script distributing Rhadamanthys Stealer by TA547 targeting global firms. The script, marked by AI-generated precise comments, indicates an advancing use of AI in cybercriminal tactics. This development highlights the need for advanced defenses against these increasingly sophisticated cyber threats.
Phishing Campaign Harnesses ScrubCrypt and BatCloak to Mask VenomRAT Deployment
A new phishing campaign utilizes ScrubCrypt and BatCloak to deploy VenomRAT, as detailed by Fortinet. Attackers use SVG files disguised as invoices to initiate malware installation, targeting data and cryptocurrency wallets. This complex attack sequence underscores the importance of advanced threat detection techniques.
Muddled Libra’s Exploitation of Cloud Services and Identity Portals
Unit 42 reveals Muddled Libra’s methods in compromising cloud services and SaaS applications. Utilizing social engineering, they orchestrate attacks across AWS and Azure, exploiting IAM and identity portals like Okta. Their deep technical understanding and strategic impersonation attacks pose significant threats to various global industries.
How Cybercriminals Unlock AI's Potential for Malice: Unveiling the Five Jailbreak Methods
Daniel Kelly of Abnormal Security exposes five primary jailbreak prompts used by cybercriminals to exploit AI models like ChatGPT for illicit purposes. These methods bypass AI's ethical restrictions to produce harmful content, including phishing emails and social engineering schemes. The jailbreak prompts—DAN, Development Mode, Translator Bot, AIM, and BISH—highlight the inventive yet alarming ways threat actors leverage AI, posing significant challenges for cybersecurity and the need for robust protective measures against AI exploitation.
MuddyWater Crafts Email Compromises to Install Remote Access Software
Between February and March 2024, MuddyWater, known for aligning with Iran's foreign policies, intensified its spear-phishing campaigns across the EMEA region, focusing on defense, energy, government, and telecommunications sectors. Malwation reports detail the group's utilization of Business Email Compromise (BEC) to deliver malicious PDFs, leading to the installation of Remote Administration Management software like Atera and ConnectWise ScreenConnect. This strategy allows unprecedented control over victims' devices, showcasing MuddyWater's evolving tactics in cyber espionage and the critical need for heightened cybersecurity awareness within targeted industries.
About the Forge & Threat Reports
Our mission is to assess the operational behaviors of all threats to provide the community, and our customers, with actionable information and enterprise-ready detections in order to defend themselves in an ever- changing threat landscape.
Intelligence Levels for Threat Reports
Tactical
Detectable threat behaviors for response with threat scenarios or threat identifiers.
Strategic
General information security news, for awareness.
Whitepapers
The World's Best SOC Teams Use Anvilogic
.svg)
.svg)
.svg)
.png)
Build Detections You Want, Where You Want
