#CYFIRMA
LightNews LightNews
campuscodi.risky.biz
Some recent malware reports

Xloader: sublime.security/blog/xloader...
Bizfum Stealer: www.cyfirma.com/research/biz...
Lumma Stealer: www.cybereason.com/blog/threat-...
CoinLurker: blog.morphisec.com/coinlurker-t...
I2PRAT: www.gdatasoftware.com/blog/2024/12...
Mamont: securelist.com/mamont-banke...
BIZFUM STEALER - CYFIRMA
EXECUTIVE SUMMARY CYFIRMA remains committed to providing timely insights into emerging threats, such as the recently uncovered “BIZFUM STEALER” on...
www.cyfirma.com
December 17, 2024 at 6:13 PM
unchi.org
I see this isn't a brand new attack but one that I hadn't seen before. It's quite slick.
Threat Actors Use Clickfix Tactics to Deploy Malicious AppleScripts for Stealing Login Credentials
The CYFIRMA research team has identified a sophisticated cybercrime campaign leveraging Clickfix tactics to deliver malicious AppleScripts.
cyberpress.org
September 2, 2025 at 3:49 PM
campuscodi.risky.biz
CyFirma researchers have discovered a new ransomware strain named Nnice. It's primarily used to target end-users, rather than enterprises.

www.cyfirma.com/research/nni...
January 23, 2025 at 12:33 AM
cscorza.bsky.social
Techniques and methods for the analysis of an APT group called

APT "Transparent Tribe" (APT36)

#Cyfirma #Osint #acscorez

www.cyfirma.com/research/osi...
OSINT Investigation: Hunting Malicious Infrastructure Linked to Transparent Tribe - CYFIRMA
EXECUTIVE SUMMARY At CYFIRMA, we provide timely insights into emerging threats and malicious tactics targeting organizations and individuals. This report...
www.cyfirma.com
December 15, 2024 at 10:23 AM
campuscodi.risky.biz
CyFirma looks at Hexon Stealer, a new Electron-based infostealer that launched this August

www.cyfirma.com/research/hex...
November 23, 2024 at 9:23 PM
kremlplots.bsky.social
🧵Zunehmende Bedrohungslage für Grossbritannien durch staatlich unterstützte russische Hackergruppen wie "Sandworm" und "APT29". (1|3)
industrialcyber.co/ransomware/c...
Cyfirma report: UK faces intensifying cyber threats from state-backed Russian hackers amid geopolitical tensions
New Cyfirma research report reveals that UK faces intensifying cyber threats from state-backed Russian hackers amid geopolitical tensions.
industrialcyber.co
December 16, 2024 at 12:24 PM
captaingee.ch
This latest blog from Cyfirma on Cl0p/Cleo exploitation is utter garbage, ignore it.
LLM YARA rule (not even valid syntax), massively inflated statistics, and misleading IOCs and analysis.
www.cyfirma.com/research/cl0...
CL0P Ransomware : Latest Attacks - CYFIRMA
INTRODUCTION The Cl0p group has been active since early 2019, leveraging vulnerabilities and exploits to encrypt files for ransom. The...
www.cyfirma.com
February 15, 2025 at 10:29 PM
lazarusholic.bsky.social
"Weekly Intelligence Report – 10 Jul 2026" published by Cyfirma. #Trend, #SupplyChain, #GitHub, #FamousChollima, #PolinRider https://www.cyfirma.com/news/weekly-intelligence-report-10-jul-2026
https://www.cyfirma.com/news/weekly-intelligence-report-10-jul-2026
www.cyfirma.com
July 12, 2026 at 11:14 PM
pvynckier.bsky.social
Weekly Intelligence Report – 26 December 2025 - CYFIRMA www.cyfirma.com/news/weekly-...
Weekly Intelligence Report – 26 December 2025 - CYFIRMA
Ransomware of the week CYFIRMA Research and Advisory Team would like to highlight ransomware trends and insights gathered while monitoring...
www.cyfirma.com
December 26, 2025 at 6:58 AM
pvynckier.bsky.social
Technical Malware Analysis Report: Python-based RAT Malware - CYFIRMA www.cyfirma.com/research/tec...
Technical Malware Analysis Report: Python-based RAT Malware - CYFIRMA
EXECUTIVE SUMMARY The malware analyzed in this report is a Python-based Remote Access Trojan (RAT) that utilizes Discord as a...
www.cyfirma.com
April 26, 2025 at 3:40 PM
youranonriots.bsky.social
The Lazarus Group has been identified as a highly sophisticated, state-sponsored cyber threat group, posing significant risks in the digital landscape. #CyberSecurity #LazarusGroup www.cyfirma.com/research/apt...
APT PROFILE – LAZARUS GROUP - CYFIRMA
The Lazarus Group is a highly sophisticated, state-sponsored cyber threat group attributed to the North Korean government. They are also...
www.cyfirma.com
August 13, 2025 at 5:13 AM
hultquist.bsky.social
Eaaaarrrth Estries, Earth Estries
Will you be mine?

www.cyfirma.com/research/apt...
APT PROFILE - EARTH ESTRIES - CYFIRMA
Earth Estries is a Chinese Advanced Persistent Threat (APT) group that has gained prominence for its sophisticated cyber espionage activities...
www.cyfirma.com
December 16, 2024 at 1:41 PM
youranonriots.bsky.social
The global cyber threat landscape is increasingly shaped by state-aligned adversaries, highlighting the urgent need for enhanced cybersecurity measures. #CyberThreats #Cybersecurity www.cyfirma.com/research/glo...
GLOBAL CYBER THREAT LANDSCAPE - CYFIRMA
EXECUTIVE SUMMARY The global cyber threat landscape is defined by state-aligned adversaries anchored by China and Russia operating alongside a...
www.cyfirma.com
October 26, 2025 at 8:37 AM
coletteweston.bsky.social
New research has identified that the UK faces an escalating #cyber threat landscape dominated by sophisticated Russian actors, including state-affiliated groups like Sandworm & APT29, & privateer entities operating with Kremlin leniency. #CyberSecurity

https://industrialcyber.co/ransomware/cyfirma…
Cyfirma report: UK faces intensifying cyber threats from state-backed Russian hackers amid geopolitical tensions
New Cyfirma research report reveals that UK faces intensifying cyber threats from state-backed Russian hackers amid geopolitical tensions.
buff.ly
December 17, 2024 at 8:00 AM
handle.invalid
#RussiaCyberThreat2024
Article: https://industrialcyber.co/ransomware/cyfirma-report-uk-faces-intensifying-cyber-threats-from-state-backed-russian-hackers-amid-geopolitical-tensions/
December 16, 2024 at 1:09 PM
kremlplots.bsky.social
🧵Das Nat. Cyber Security Centre bekämpft diese Bedrohungen, doch die Risiken werden gemäss cyfirma unterschätzt. Die Angriffe sind Teil der russ. Kriegsführung in der Ukraine und zur globalen Instabilitätssteigerung, wobei auch nicht-staatliche Akteure eine Rolle spielen. (3|3)
December 16, 2024 at 12:24 PM
gate15.bsky.social
Today in the SUN we feature an article from Cyfirma on the convergence of infostealers and ransomware.

Read more below:
www.cyfirma.com/research/the...

#cybersecurity
@andyjabbour.bsky.social
The Convergence of Infostealers and Ransomware : From Credential Harvesting to Rapid Extortion Chains - CYFIRMA
EXECUTIVE SUMMARY Ransomware activity accelerated sharply from late 2025 into early 2026, with a growing number of campaigns relying on...
www.cyfirma.com
February 2, 2026 at 5:21 PM
geeknik.bsky.social
States weaponize frontier AI for missile guidance while syndicates ransom Japanese plastics. Humanity built a thinking machine just to defend unpatched enterprise software from stolen browser cookies.
Weekly Intelligence Report - 18 Sep 2026 - CYFIRMA
Ransomware In Focus CYFIRMA Research and Advisory Team would like to highlight ransomware trends and insights gathered while monitoring various...
www.cyfirma.com
September 22, 2026 at 4:37 AM
pvynckier.bsky.social
Weekly Intelligence Report – 10 April 2026 - CYFIRMA www.cyfirma.com/news/weekly-...
Weekly Intelligence Report – 10 April 2026 - CYFIRMA
Ransomware In Focus CYFIRMA Research and Advisory Team would like to highlight ransomware trends and insights gathered while monitoring various...
www.cyfirma.com
April 10, 2026 at 7:50 AM