Experienced a breach?
Contact us
Experienced a breach?
CONTACT US
Resource Type
Blog
Threat Reports and Advisories
Guides and tools
Datasheet
Webinars
Topics
Cloud
Incident Response
OT Security
Malware
Vulnerabilities
Attack Techniques
Detection
State Actors
Research
Forensics
Email
Cyber Crime
Ransomware
Mitigation and Response
Managed Detection and Response
Tabletop War Games
Threat Intelligence
Security Mitigation
VMware Security
Artificial intelligence (AI)
Threat Research
Blog Attack Techniques Cyber Crime Detection Email Malware Research
Breaking Down the Casbaneiro Infection Chain – Part II
Since 2018, the Casbaneiro banking trojan has targeted Latin American financial sectors. Sygnia monitors it closely as a major threat to multi-regional financial organizations.
Amir Sadon, Ohad Amar, Dor Nizar, Shani Adir
25.07.2023
10 min
Blog Guides and tools Attack Techniques Cyber Crime Detection Email Malware Research
Case Study: cracking a global Adversary-In-The-Middle campaign using a threat intelligence toolkit
Using a variety of CTI enrichment techniques Sygnia was able to determine that the BEC attack was only a part of a much wider campaign, potentially impacting dozens of world-wide organizations.
Amir Sadon, Dor Fenigshtein, Shani Adir Nissim, Amnon Kushnir , Ori Porag
13.06.2023
17 min
Blog Detection Research
Accelerating Cyber Investigations with Velocity XDR’s Integrated Behavioral Analytics
Sygnia's Velocity XDR uses UEBA not only to form a baseline for detecting anomalies, but also make the internal data easily accessible to platform users.
Amit Somech, Gal Cohen, Michael Hekmati
20.04.2023
8 min
Blog Attack Techniques Detection Malware Ransomware Research
Threat Actor Spotlight: RagnarLocker Ransomware
Explore the threat of RagnarLocker ransomware. Uncover its tactics and implications in this Sygnia blog spotlight on cyber threats.
Oren Biderman, Amnon Kushnir, Gopal Purohit, Dan Saunders, Etai Livne
10.04.2023
14 min
Blog Attack Techniques Detection Forensics Research
The Downfall Of Dpapi Top Secret Weapon
Attackers exploit Windows DPAPI to steal data. Defenders can replace DPAPI backup key for full remediation.
Gil Biton, Adversarial Tactics Expert
7.02.2023
27 min
Blog Attack Techniques Cloud Detection Forensics Research
Incident Response in Google Cloud: Forensic Artifacts
Discover effective incident response in Google Cloud. Learn how to analyze forensic artifacts for swift resolution. Expert insights on Sygnia blog.
Wesley Guerra, Itay Angi, Oren Biderman, Shani Adir, Itay Shohat
2.02.2023
15 min
Blog Cloud Detection Research
Incident Response in Google Cloud: Foundations
Incident response and threat hunting in Google Cloud Platform and Workspace
Wesley Guerra, Itay Angi, Shani Adir, Itay Shohat
3.11.2022
12 min
Threat Reports and Advisories Attack Techniques Detection Malware Ransomware Research
Revealing Emperor Dragonfly: Night Sky and Cheerscrypt – A Single Ransomware Group
The outcome of investigation by Sygnia's incident response teams - Cheerscrypt & Night Sky are rebrands of one ransomware group, named ‘Emperor Dragonfly’.
Oren Biderman, Amnon Kushnir, Noam Lifshitz, Ori Porag, Yoav Mazor, Erez Kalman, Haim Nachmias
3.10.2022
12 min
Blog Attack Techniques Detection Malware Ransomware Research
Vice Society Ransomware Group: Threats to Health & Education Sector
Professionals across all industries, agree that the Vice Society ransomware group is a major cyber threat, especially in health & education sector
Oren Biderman, Shani Adir Nissim, Noam Lifshitz, Eran Liloof, Or Zuckerman Farkash
15.09.2022
4 min
Blog Attack Techniques Detection Malware Ransomware Research
Vice Society TTPs: Insights from a Real-World Ransomware Investigation
Get technical insights based on forensic investigations of Vice Society (ransomware group carrying out double extortion attacks) conducted by our IR team.
Oren Biderman, Shani Adir Nissim, Noam Lifshitz, Eran Liloof, Or Zuckerman Farkash
2.09.2022
9 min
Blog Attack Techniques Research
Offensive CI/CD – A Cat on a Vessel
Leveraging CI CD pipelines to automate implementation of evasion techniques in offensive tools - enacting adversary simulation tasks without detection.
Ilia Rabinovich, Gil Biton, Oleg Lerner
5.07.2022
23 min
Blog Attack Techniques Cyber Crime Detection Email Malware Research
Breaking Down the Casbaneiro Infection Chain
The Casbaneiro banking trojan targets financial organizations to steal user data for financial gain. Get a detailed “attacker fingerprint”.
Dan Saunders, Omri Bavly, Noam Lifshitz, Itay Shohat
7.04.2022
14 min
Solutions
Blog Attack Techniques Detection Research Vulnerabilities
7 Cyber Attacks That Kept the Industry Talking in 2021
A journey back through 2021 - What we’ve learned from 5 major cyber attacks that took place in 2021 as well as 2 new threat actors identified by Sygnia.
Sygnia Team
7.02.2022
6 min
Blog Attack Techniques Detection Research Vulnerabilities
It’s a Threat Actor’s Paradise: Getting Ahead of Attackers in 2022
Achieving cyber resilience in the hostile attack terrain comes down to an organization’s ability to flip the asymmetry between them and the threat actors.
David Warshavski, VP of Enterprise Security
29.12.2021
8 min
Blog Attack Techniques Detection Forensics Research Vulnerabilities
End-to-End LOG4SHELL Hunting Strategy
Defenders, hunt for Log4Shell exploitation attempts, distinguish between failed and successful attempts and identify post-exploitation activities.
Oren Biderman, Lotan Sery, Shani Adir, Oleg Lerner, Shaked Tanchuma, Adva Harosh, Martin Korman, Noam Lifshitz, Itay Shohat
17.12.2021
12 min
Guides and tools Cloud Detection Forensics Research
Cloud Scout: a New Open Source Tool for Cloud Security
Cloud Scout, an open-source tool for cloud security - Map cloud (& hybrid) environments, identify attack paths & vulnerabilities, and enhance resilience.
Cloud Scout: a New Open Source Tool for Cloud Security
21.10.2021
8 min
subsctibe decor
Want to get in touch?
Contact us