Experienced a breach?
Contact us
Experienced a breach?
CONTACT US
Resource Type
Blog
Threat Reports and Advisories
Guides and tools
Datasheet
Webinars
Topics
Cloud
Incident Response
OT Security
Malware
Vulnerabilities
Attack Techniques
Detection
State Actors
Research
Forensics
Email
Cyber Crime
Ransomware
Mitigation and Response
Managed Detection and Response
Tabletop War Games
Threat Intelligence
Security Mitigation
VMware Security
Artificial intelligence (AI)
Threat Research
Blog Attack Techniques Cyber Crime Detection Forensics Incident Response Malware Ransomware Research
Chapter 3 – Reversing DoSvc C++ using Ghidra – Part 1
In this chapter, we’ll finally get started on my favorite part: the reversing phase. Reversing is like looking for a needle in a haystack, so prepare yourselves, because things are about to get technical.
Binyamin Levine, Oleg Lerner
6.05.2024
18 min
Blog Attack Techniques Cyber Crime Detection Forensics Incident Response Malware Ransomware Research
Chapter 2 – Black Box Research
The intricacies of WUDO (Windows Update Delivery Optimization).
Binyamin Levine, Oleg Lerner
16.04.2024
23 min
Threat Reports and Advisories Attack Techniques Detection Research
Defending Your Network Edge Against the Next Zero-Day Exploit
Learn how to break the endless cycle of vulnerable network edge devices, by combining immediate actions with strategic initiatives to transition from conventional methods to a Zero Trust approach.
Rob Kehl, Haim Nachmias, Omer Kidron
9.04.2024
13 min
Threat Reports and Advisories Attack Techniques Detection Research
XZ Utils Backdoor – Advisory for Mitigation and Response
Organizations Urged to Address Newly Discovered Security Flaw to Prevent Unauthorized Access to Linux Machines.
Lahav Meir, Omer Kidron
2.04.2024
7 min
Blog Attack Techniques Cyber Crime Detection Forensics Incident Response Malware Ransomware Research
Chapter 1 – Introduction
The intricacies of WUDO (Windows Update Delivery Optimization).
Binyamin Levine, Oleg Lerner
1.04.2024
6 min
Blog Attack Techniques Cyber Crime Detection Forensics Incident Response Malware Ransomware Research
The Anatomy of a BlackCat (ALPHV) Attack
Explore the thwarted cyber extortion attempt by the BlackCat ransomware group, unraveled by Sygnia's Incident Response team in 2023.
Oren Biderman, Amir Sadon
5.03.2024
28 min
Blog Guides and tools Attack Techniques Cloud Detection Forensics Research
Proof of Concept: Overcoming Google Cloud Incident Response Issues with ‘Mirage’
How the Mirage tool developed by Sygnia assists in evidence collection & investigation, while uncovering key log analysis & incident response strategies for Google Cloud.
Itay Angi
21.02.2024
22 min
Blog Guides and tools Attack Techniques Cloud Detection Forensics Research
Announcing ‘Mirage’ – New Opensource Tool to Combat Google Cloud Incident Response Challenges
New open-source tool streamlines incident response in Google Workspace & GCP. Overcome challenges, access data, & gain insights faster. Learn more about Mirage & Google Cloud forensics in our blog series.
Itay Angi
21.02.2024
13 min
Guides and tools Attack Techniques Incident Response
Building Cyber Readiness: 5 Traits of the World’s Most Cyber-Ready Organizations
The most dangerous cyber attackers have something in common: they are tenacious at their craft and dogged in their determination to find and exploit security weaknesses.
Sygnia Team
19.02.2024
15 min
Blog Attack Techniques Cyber Crime Detection Email Malware Research
Sygnia Annual Field Report
From relentless adversaries to resilient businesses, the Sygnia Annual Field Report offers unique insights and strategic guidance to strengthen your cybersecurity defenses against the ever-evolving threat landscape.
Sygnia Team
14.02.2024
4 min
Threat Reports and Advisories Attack Techniques Incident Response
Mitigation Advisory: Fortinet and Ivanti Exploitable Vulnerabilities
Protect your network against critical remote code execution vulnerabilities in Fortinet and Ivanti (formerly Pulse Secure) devices, now actively exploited in the wild.
Sygnia Team
14.02.2024
4 min
Blog Attack Techniques Research
Guarding the Bridge: New Attack Vectors in Azure AD Connect
Sygnia's research on Azure AD Connect revealed Attack Vectors in Azure, exposing credential and NT hash extraction, bypassing security.
Noam Moshe, Ofir Hamam
2.08.2023
18 min
Solutions
Blog Attack Techniques Cyber Crime Detection Email Malware Research
Breaking Down the Casbaneiro Infection Chain – Part II
Since 2018, the Casbaneiro banking trojan has targeted Latin American financial sectors. Sygnia monitors it closely as a major threat to multi-regional financial organizations.
Amir Sadon, Ohad Amar, Dor Nizar, Shani Adir
25.07.2023
10 min
Blog Guides and tools Attack Techniques Cyber Crime Detection Email Malware Research
Case Study: cracking a global Adversary-In-The-Middle campaign using a threat intelligence toolkit
Using a variety of CTI enrichment techniques Sygnia was able to determine that the BEC attack was only a part of a much wider campaign, potentially impacting dozens of world-wide organizations.
Amir Sadon, Dor Fenigshtein, Shani Adir Nissim, Amnon Kushnir , Ori Porag
13.06.2023
17 min
Blog Attack Techniques Detection Malware Ransomware Research
Threat Actor Spotlight: RagnarLocker Ransomware
Explore the threat of RagnarLocker ransomware. Uncover its tactics and implications in this Sygnia blog spotlight on cyber threats.
Oren Biderman, Amnon Kushnir, Gopal Purohit, Dan Saunders, Etai Livne
10.04.2023
14 min
Blog Attack Techniques Detection Forensics Research
The Downfall Of Dpapi Top Secret Weapon
Attackers exploit Windows DPAPI to steal data. Defenders can replace DPAPI backup key for full remediation.
Gil Biton, Adversarial Tactics Expert
7.02.2023
27 min
Blog Attack Techniques Cloud Detection Forensics Research
Incident Response in Google Cloud: Forensic Artifacts
Discover effective incident response in Google Cloud. Learn how to analyze forensic artifacts for swift resolution. Expert insights on Sygnia blog.
Wesley Guerra, Itay Angi, Oren Biderman, Shani Adir, Itay Shohat
2.02.2023
15 min
Threat Reports and Advisories Attack Techniques Detection Malware Ransomware Research
Revealing Emperor Dragonfly: Night Sky and Cheerscrypt – A Single Ransomware Group
The outcome of investigation by Sygnia's incident response teams - Cheerscrypt & Night Sky are rebrands of one ransomware group, named ‘Emperor Dragonfly’.
Oren Biderman, Amnon Kushnir, Noam Lifshitz, Ori Porag, Yoav Mazor, Erez Kalman, Haim Nachmias
3.10.2022
12 min
subsctibe decor
Want to get in touch?
Contact us