Experienced a breach?
Contact us
Experienced a breach?
CONTACT US
Resource Type
Blog
Threat Reports and Advisories
Guides and tools
Datasheet
Webinars
Topics
Cloud
Incident Response
OT Security
Malware
Vulnerabilities
Attack Techniques
Detection
State Actors
Research
Forensics
Email
Cyber Crime
Ransomware
Mitigation and Response
Managed Detection and Response
Tabletop War Games
Threat Intelligence
Security Mitigation
VMware Security
Artificial intelligence (AI)
Threat Research
Blog Attack Techniques Cyber Crime Detection Forensics Incident Response Malware Ransomware Research
The Anatomy of a BlackCat (ALPHV) Attack
Explore the thwarted cyber extortion attempt by the BlackCat ransomware group, unraveled by Sygnia's Incident Response team in 2023.
Oren Biderman, Amir Sadon
5.03.2024
28 min
Blog Guides and tools Attack Techniques Cloud Detection Forensics Research
Proof of Concept: Overcoming Google Cloud Incident Response Issues with ‘Mirage’
How the Mirage tool developed by Sygnia assists in evidence collection & investigation, while uncovering key log analysis & incident response strategies for Google Cloud.
Itay Angi
21.02.2024
22 min
Blog Guides and tools Attack Techniques Cloud Detection Forensics Research
Announcing ‘Mirage’ – New Opensource Tool to Combat Google Cloud Incident Response Challenges
New open-source tool streamlines incident response in Google Workspace & GCP. Overcome challenges, access data, & gain insights faster. Learn more about Mirage & Google Cloud forensics in our blog series.
Itay Angi
21.02.2024
13 min
Blog Attack Techniques Cyber Crime Detection Email Malware Research
Sygnia Annual Field Report
From relentless adversaries to resilient businesses, the Sygnia Annual Field Report offers unique insights and strategic guidance to strengthen your cybersecurity defenses against the ever-evolving threat landscape.
Sygnia Team
14.02.2024
4 min
Blog Detection Forensics Malware Research
Diving into the new windows 11 PCA artifact
Discover the new forensic artifact in Windows 11 (22H2) and explore its format and behavior. Learn how to leverage it in investigations with our comprehensive documentation for DFIR practitioners.
Harel Segev, Incident Response Expert
15.11.2023
10 min
Blog Detection
12 Questions you should ask when choosing a Managed XDR
Discover the 12 essential questions to ask when selecting a managed XDR solution (MXDR). Make an informed choice for robust threat detection and response.
Fred Pulver, Solutions Marketing Manager
17.08.2023
7 min
Blog Attack Techniques Cyber Crime Detection Email Malware Research
Breaking Down the Casbaneiro Infection Chain – Part II
Since 2018, the Casbaneiro banking trojan has targeted Latin American financial sectors. Sygnia monitors it closely as a major threat to multi-regional financial organizations.
Amir Sadon, Ohad Amar, Dor Nizar, Shani Adir
25.07.2023
10 min
Blog Guides and tools Attack Techniques Cyber Crime Detection Email Malware Research
Case Study: cracking a global Adversary-In-The-Middle campaign using a threat intelligence toolkit
Using a variety of CTI enrichment techniques Sygnia was able to determine that the BEC attack was only a part of a much wider campaign, potentially impacting dozens of world-wide organizations.
Amir Sadon, Dor Fenigshtein, Shani Adir Nissim, Amnon Kushnir , Ori Porag
13.06.2023
17 min
Blog Detection Research
Accelerating Cyber Investigations with Velocity XDR’s Integrated Behavioral Analytics
Sygnia's Velocity XDR uses UEBA not only to form a baseline for detecting anomalies, but also make the internal data easily accessible to platform users.
Amit Somech, Gal Cohen, Michael Hekmati
20.04.2023
8 min
Blog Attack Techniques Detection Malware Ransomware Research
Threat Actor Spotlight: RagnarLocker Ransomware
Explore the threat of RagnarLocker ransomware. Uncover its tactics and implications in this Sygnia blog spotlight on cyber threats.
Oren Biderman, Amnon Kushnir, Gopal Purohit, Dan Saunders, Etai Livne
10.04.2023
14 min
Blog Attack Techniques Detection Forensics Research
The Downfall Of Dpapi Top Secret Weapon
Attackers exploit Windows DPAPI to steal data. Defenders can replace DPAPI backup key for full remediation.
Gil Biton, Adversarial Tactics Expert
7.02.2023
27 min
Blog Attack Techniques Cloud Detection Forensics Research
Incident Response in Google Cloud: Forensic Artifacts
Discover effective incident response in Google Cloud. Learn how to analyze forensic artifacts for swift resolution. Expert insights on Sygnia blog.
Wesley Guerra, Itay Angi, Oren Biderman, Shani Adir, Itay Shohat
2.02.2023
15 min
Solutions
Blog Cloud Detection Research
Incident Response in Google Cloud: Foundations
Incident response and threat hunting in Google Cloud Platform and Workspace
Wesley Guerra, Itay Angi, Shani Adir, Itay Shohat
3.11.2022
12 min
Threat Reports and Advisories Attack Techniques Detection Malware Ransomware Research
Revealing Emperor Dragonfly: Night Sky and Cheerscrypt – A Single Ransomware Group
The outcome of investigation by Sygnia's incident response teams - Cheerscrypt & Night Sky are rebrands of one ransomware group, named ‘Emperor Dragonfly’.
Oren Biderman, Amnon Kushnir, Noam Lifshitz, Ori Porag, Yoav Mazor, Erez Kalman, Haim Nachmias
3.10.2022
12 min
Blog Attack Techniques Detection Malware Ransomware Research
Vice Society Ransomware Group: Threats to Health & Education Sector
Professionals across all industries, agree that the Vice Society ransomware group is a major cyber threat, especially in health & education sector
Oren Biderman, Shani Adir Nissim, Noam Lifshitz, Eran Liloof, Or Zuckerman Farkash
15.09.2022
4 min
Blog Attack Techniques Detection Malware Ransomware Research
Vice Society TTPs: Insights from a Real-World Ransomware Investigation
Get technical insights based on forensic investigations of Vice Society (ransomware group carrying out double extortion attacks) conducted by our IR team.
Oren Biderman, Shani Adir Nissim, Noam Lifshitz, Eran Liloof, Or Zuckerman Farkash
2.09.2022
9 min
Blog Attack Techniques Detection Email Forensics Vulnerabilities
Hybrid Phishing Attack Vector – Complementing Phishing Campaigns
Cyber-crime groups are targeting Java-based infrastructures susceptible to the Log4Shell vulnerability and are delivering Qakbot phishing emails
Yoav Mazor, Noam Lifshitz, Itay Shohat
24.05.2022
6 min
Blog Attack Techniques Detection Vulnerabilities
The Misconceptions of 2021’s Black Swan Cyber Events
Here are 3 common misconceptions about Black swan events that are considered incidents with high impact and low frequency that are impossible to predict.
Yossi Torati, Enterprise Security Department Manager
24.05.2022
5 min
subsctibe decor
Want to get in touch?
Contact us