Is your PHP version at risk of PHP2Shell RCE? Check Free Now
SOCRadar Blog

Threat intelligence, decoded.

In-depth research, dark web reporting, and practical guidance for security teams, written by SOCRadar threat analysts.

Latest articles

New Victims of BlackCat and LockBit, Gentex Data Breach, and Education Institution Access Sales SOCRadar

New Victims of BlackCat and LockBit, Gentex Data Breach, and Education Institution Access Sales

Powered by DarkMirror™ Ransomware is on the headlines again in SOCRadar’s weekly dark web summary. Well-known cybercrime gangs LockBit and BlackCat (ALPHV) continue their attacks. The BlackCat ransomware gang announced…

EvilExtractor Stealer Malware Attacks Peaked in March 2023 SOCRadar

EvilExtractor Stealer Malware Attacks Peaked in March 2023

EvilExtractor (or Evil Extractor), a  data theft tool , is trending in Europe and the United States due to an uptick in attacks. EvilExtractor is provided as if it is…

How SOCRadar Stopped a BEC Attack on Track SOCRadar

Customer Story: How SOCRadar Stopped a BEC Attack on Track?

“Hello Alice, ABC company is one of our new business partners. The invoice attached needs to be taken care of today. This is high priority. Regards,  Bob,  CFO, XYZ” This…

APT28 Exploits Cisco Vulnerability to Deploy Malware in Espionage Campaign SOCRadar

APT28 Exploits Cisco Vulnerability to Deploy Malware in Espionage Campaign

Russian nation-state actors are using a patched  remote code execution  vulnerability in Cisco network appliances to conduct surveillance and deploy  malware , according to UK and US cybersecurity and intelligence…

The Rise of Malicious Packages in DevOps SOCRadar

The Rise of Malicious Packages in DevOps

[Update] July 21, 2023: On July 18, 2023, GitHub identified a social engineering campaign that targets the personal accounts of employees of technology firms, particularly those connected to the blockchain,…

What Happens on the Shadowy Lands of Vulnerability Brokers SOCRadar

What Happens on the Shadowy Lands of Vulnerability Brokers

In the ever-growing world ofcybersecurity, vulnerability brokers have gained enough voice to be recognized as essential actors in the space. These actors can be anonymous individuals or well-known organizations specializing…

Zaraza Bot: New Malware Uses Telegram for Command & Control SOCRadar

Zaraza Bot: New Malware Uses Telegram for Command & Control

The Zaraza bot is a new type of malware that steals login information and uses Telegram as its command and control. This malware targets a wide range of web browsers…

The Royal Ransomware’s Latest Victim, Micro-Star International, KuCoin, and Kuwaiti Citizens Data Sales SOCRadar

The Royal Ransomware’s Latest Victim, Micro-Star International, KuCoin, and Kuwaiti Citizens Data Sales

Powered by DarkMirror™ This week, KillNet announced a series of high-impact Distributed Denial of Service (DDoS) attacks. The Royal ransomware group also added Stanley Electric to its victim list. Data…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action