Anvilogic Forge Threat Research Reports

Here you can find an accumulation of trending threats published weekly by the Anvilogic team.

We curate threat intelligence to provide situational awareness and actionable insights

Threat Identifier Detections

Atomic detections that serve as the foundation of our detection framework.

Threat Scenario Detections

Risk, pattern, and sequence-based detections utilizing the outputs of Threat Identifiers as a means of identifying actual threats.

Reports Hot Off the Forge

Threat News Reports
Trending Threat Reports
ResearchArticles

Forge Threat Report

Forge Report: First Half Threat Trends of 2024

Anvilogic Forge's latest report offers essential insights into key threat trends and adversarial tactics observed in the first half of 2024. From the pervasive use of PowerShell and remote access tools to sophisticated social engineering and attacks on the healthcare sector, this comprehensive analysis provides actionable intelligence and detection rules to bolster your defenses. Explore our key findings and access ready-to-deploy detection content to enhance your security posture.

All Threat Reports

Levels

All
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
This is some text inside of a div block.
02
-
01
-
2023
Level:
Tactical
|
Source:

Gamaredon Group Organizes Attacks Through Telegram

The Gamaredon Group is increasing cyberattacks on Ukraine, using Telegram to evade detection. BlackBerry reports they target government and critical infrastructure entities with weaponized documents via spear-phishing, exploiting remote template injection vulnerabilities to bypass Microsoft macro protections.

Aerospace
Critical Infrastructure
Government
This is some text inside of a div block.
02
-
01
-
2023
Level:
Tactical
|
Source:

The Manufacturing Industry a Frequent Target of Vice Society

Vice Society ransomware is expanding its attacks beyond education and healthcare to the manufacturing industry, according to Trend Micro. Using compromised credentials and exploiting vulnerabilities, the group has impacted manufacturing in Brazil, Argentina, Switzerland, and Israel.

Education
Finance
Government
Healthcare
Manufacturing
This is some text inside of a div block.
01
-
25
-
2023
Level:
Strategic
|
Source:

A Refusal to Pay Ransom Sinks Ransomware Profits in 2022

Ransomware profits dropped 40% in 2022 to $457 million as victims increasingly refused to pay. Factors include unreliable cybercriminals, changing public perceptions, and better backup management. Despite this, ransomware threats from gangs like LockBit and Hive persist.

Global
This is some text inside of a div block.
01
-
25
-
2023
Level:
Strategic
|
Source:

CERT-UA Prevents Service Disruption to Ukraine News Agency from Russian Threat Actor

CERT-UA foiled a Russian cyberattack on the National News Agency of Ukraine (Ukrinform), preventing operational disruptions. The attack, suspected to involve CaddyWiper malware by the Sandworm group, aimed at undermining Ukrainian media.

Media
This is some text inside of a div block.
01
-
25
-
2023
Level:
Tactical
|
Source:

PyPI Author 'Lolip0p' Distributes Info-stealing Malware

Fortinet discovers PyPI author 'Lolip0p' distributing info-stealing malware via Python packages 'colorslib,' 'httpslib,' and 'libhttps.' The packages use PowerShell commands to download and run malicious binaries from DropBox, affecting global users.

Global
This is some text inside of a div block.
01
-
25
-
2023
Level:
Tactical
|
Source:

Malicious Payloads with Batloader Malware in 2022

Trend Micro reports Batloader malware's heightened activity in Q4 2022, distributing threats like Ursnif, Vidar, and Royal ransomware. Batloader uses SEO poisoning and obfuscated JavaScript to evade detection and deliver payloads, affecting global industries.

Global

Intelligence Levels for Threat Reports

Tactical

Detectable threat behaviors for response with threat scenarios or threat identifiers.

Strategic

General information security news, for awareness.

Whitepapers

No items found.

The World's Best SOC Teams Use Anvilogic

Paypal Logo
Rubrik Logo
Deloitte Logo
Ebay Logo
Regeneron Logo
SurveyMonkey Logo
TradeWeb Logo
Alteryx Logo
First Citizens Bank Logo
Crypto.com Logo
Rakuten Mobile Logo
St. George's University Logo
St. George's University Logo
St. George's University Logo
St. George's University Logo
St. George's University Logo
St. George's University Logo
St. George's University Logo
St. George's University Logo
Paypal Logo
Sprinklr Logo
SAP Logo
Ebay Logo
Regeneron Logo
SurveyMonkey Logo
TradeWeb Logo
Alteryx Logo
First Citizens Bank Logo
Crypto.com Logo
Rakuten Mobile Logo
St. George's University Logo
Navan Logo
ADP Logo
Labcorp Logo
Dyson Logo
siemens Logo

Build Detections You Want,
Where You Want

Build Detections You Want,
Where You Want