Threat Research

All About 3ve

The Department of Homeland Security and the Federal Bureau of Investigation announced this week it disrupted a significant online ad fraud operation, 3ve, that involved 1.7 million IP addresses and caused millions of dollars in losses.

End of An Era As Kelihos Botnet Operator Jailed

A Russian man pleaded guilty this week to running Kelihos, a botnet that for years helped facilitate a lengthy spam and credential-harvesting campaign.

Mobile Attack Campaign Used MDM to Intercept Traffic

Researchers recently discovered a narrowly focused attack that targets iPhone users with data-stealing, location tracking malware.

New Abilities, Targets of VPNFilter Malware Disclosed

Researchers warned Wednesday that VPNFilter, the strain of potentially destructive malware uncovered last week, can infect more devices than previously thought. It also has the ability to intercept network traffic and deliver malicious payloads via a man-in-the-middle attack.

US Government Outing North Korean Cyberespionage

The Federal Bureau of Investigation and the Department of Homeland Security on Tuesday released an alert detailing two kinds of malware used by Hidden Cobra, the codename the U.S. has given to the North Korean government's cyberattacks.

FBI, DOJ Disrupt Botnet of 500K Hacked Routers

The US Federal Bureau of Investigation (FBI) seized control of a server connected to the VPNFilter botnet, a collection of roughly 500,000 hacked routers and network attached storage devices, on Wednesday. It was widely speculated attackers behind the botnet were gearing up for an attack on Ukraine this weekend.