Threat research
Access the latest threat research
Vercel-hosted RMM abuse campaign evolves with Telegram C2 for victim filtering
Campaign snapshot
Aisuru botnet: Early October attacks escalate into record-setting DDoS activity
Threat report
Cloudflare participates in global operation to disrupt RaccoonO365
Threat report
Attackers abusing Proofpoint & Intermedia link wrapping to deliver phishing payloads
Threat report
New SSA-themed phishing campaign installs trojanized ScreenConnect
Threat report
Cloudflare participates in global operation to disrupt Lumma Stealer
Threat report
Loot, load, repeat: dissecting the Lumma Stealer playbook
Threat brief
SVGs: the hacker’s canvas
Threat spotlight
Black Basta’s blunder: exploiting the gang’s leaked chats
Threat brief
Bitcoin to the moon: Trump endorsing, scammers exploiting
Threat spotlight
Sacked or hacked? Unmasking employment termination scams
Campaign snapshot
Inside LameDuck: analyzing anonymous Sudan’s threat operations
Threat report
Unraveling SloppyLemming’s operations across South Asia
Threat report
Freight fraud surge: global supply chain compromises
Campaign snapshot
Disrupting FlyingYeti's campaign targeting Ukraine
Threat report
Impersonation is fooling the enterprise
Campaign snapshot
Malicious “RedAlert - Rocket Alerts”
Threat brief