Experienced a breach?
Contact us
Experienced a breach?
CONTACT US
Resource Type
Blog
Threat Reports and Advisories
Guides and tools
Datasheet
Webinars
Topics
Cloud
Incident Response
OT Security
Malware
Vulnerabilities
Attack Techniques
Detection
State Actors
Research
Forensics
Email
Cyber Crime
Ransomware
Mitigation and Response
Managed Detection and Response
Tabletop War Games
Threat Intelligence
Security Mitigation
VMware Security
Artificial intelligence (AI)
Threat Research
Threat Reports and Advisories Attack Techniques Detection Incident Response Malware Threat Research
Shai-Hulud Returns: When Software Trust Becomes the Attack Surface
The August 2026 Shai-Hulud campaign was more than another npm compromise, it reflected the evolution of software supply chain attacks, where build pipelines and trust mechanisms have become high-value targets.
Omer Kidron, Enterprise Security Expert
Lahav Meir, Senior Enterprise Security Expert
5.08.2026
11 min
Blog Cyber Crime Incident Response Malware Ransomware
Inside a Sophisticated Recovery Scam Network: Evidence from a Live Investigation into Legal Services Impersonation
A live investigation into a global recovery scam network exploiting business impersonation, fake websites, and repeat victimization across industries.
Amir Sadon, Ronen Regev, Alon Eliassaf
5.02.2026
15 min
Blog Forensics Incident Response Malware Ransomware
Ransomware Attacks in 2024: The Most Devastating Year Yet?
Discover how ransomware attacks in 2024 surged to record levels, exposing major vulnerabilities. Learn about the biggest threats, trends, and key incidents.
Sygnia Team
2.04.2025
10 min
Blog Attack Techniques Detection Forensics Incident Response Malware Managed Detection and Response Research
A Surge in Identity-based Attacks: Cybersecurity trends from Sygnia’s new 2025 Threat Report
Explore key cybersecurity trends for 2025, including ransomware evolution, supply chain vulnerabilities, and identity-based threats. Discover actionable strategies and expert insights to strengthen your organization’s resilience.
Sygnia Team
2.02.2025
5 min
Blog Malware Ransomware
What is a Rootkit? Exploring the Hidden Threats and Their Impact on System Security
Learn what Rootkits are, how sophisticated threat actors leverage them to gain full control of computers and systems, and how to protect your systems from this unique risk.
Dor Nizar, Malware Researcher
12.08.2024
6 min
Blog Attack Techniques Cyber Crime Detection Forensics Incident Response Malware Ransomware Research
Chapter 3 – Reversing DoSvc C++ using Ghidra – Part 1
In this chapter, we’ll finally get started on my favorite part: the reversing phase. Reversing is like looking for a needle in a haystack, so prepare yourselves, because things are about to get technical.
Binyamin Levine, Oleg Lerner
6.05.2024
18 min
Blog Attack Techniques Cyber Crime Detection Forensics Incident Response Malware Ransomware Research
Chapter 2 – Black Box Research
The intricacies of WUDO (Windows Update Delivery Optimization).
Binyamin Levine, Oleg Lerner
16.04.2024
23 min
Blog Attack Techniques Cyber Crime Detection Forensics Incident Response Malware Ransomware Research
Chapter 1 – Introduction
The intricacies of WUDO (Windows Update Delivery Optimization).
Binyamin Levine, Oleg Lerner
1.04.2024
6 min
Blog Attack Techniques Cyber Crime Detection Forensics Incident Response Malware Ransomware Research
The Anatomy of a BlackCat (ALPHV) Attack
Explore the thwarted cyber extortion attempt by the BlackCat ransomware group, unraveled by Sygnia's Incident Response team in 2023.
Oren Biderman, Amir Sadon
5.03.2024
28 min
Blog Attack Techniques Cyber Crime Detection Email Malware Research
Sygnia Annual Field Report
From relentless adversaries to resilient businesses, the Sygnia Annual Field Report offers unique insights and strategic guidance to strengthen your cybersecurity defenses against the ever-evolving threat landscape.
Sygnia Team
14.02.2024
4 min
Blog Detection Forensics Malware Research
Diving into the new windows 11 PCA artifact
Discover the new forensic artifact in Windows 11 (22H2) and explore its format and behavior. Learn how to leverage it in investigations with our comprehensive documentation for DFIR practitioners.
Harel Segev, Incident Response Expert
15.11.2023
10 min
Blog Attack Techniques Cyber Crime Detection Email Malware Research
Breaking Down the Casbaneiro Infection Chain – Part II
Since 2018, the Casbaneiro banking trojan has targeted Latin American financial sectors. Sygnia monitors it closely as a major threat to multi-regional financial organizations.
Amir Sadon, Ohad Amar, Dor Nizar, Shani Adir
25.07.2023
10 min
Solutions
Blog Guides and tools Attack Techniques Cyber Crime Detection Email Malware Research
Case Study: cracking a global Adversary-In-The-Middle campaign using a threat intelligence toolkit
Using a variety of CTI enrichment techniques Sygnia was able to determine that the BEC attack was only a part of a much wider campaign, potentially impacting dozens of world-wide organizations.
Amir Sadon, Dor Fenigshtein, Shani Adir Nissim, Amnon Kushnir , Ori Porag
13.06.2023
17 min
Blog Attack Techniques Detection Malware Ransomware Research
Threat Actor Spotlight: RagnarLocker Ransomware
Explore the threat of RagnarLocker ransomware. Uncover its tactics and implications in this Sygnia blog spotlight on cyber threats.
Oren Biderman, Amnon Kushnir, Gopal Purohit, Dan Saunders, Etai Livne
10.04.2023
14 min
Threat Reports and Advisories Attack Techniques Detection Malware Ransomware Research
Revealing Emperor Dragonfly: Night Sky and Cheerscrypt – A Single Ransomware Group
The outcome of investigation by Sygnia's incident response teams - Cheerscrypt & Night Sky are rebrands of one ransomware group, named ‘Emperor Dragonfly’.
Oren Biderman, Amnon Kushnir, Noam Lifshitz, Ori Porag, Yoav Mazor, Erez Kalman, Haim Nachmias
3.10.2022
12 min
Blog Attack Techniques Detection Malware Ransomware Research
Vice Society Ransomware Group: Threats to Health & Education Sector
Professionals across all industries, agree that the Vice Society ransomware group is a major cyber threat, especially in health & education sector
Oren Biderman, Shani Adir Nissim, Noam Lifshitz, Eran Liloof, Or Zuckerman Farkash
15.09.2022
4 min
Blog Attack Techniques Detection Malware Ransomware Research
Vice Society TTPs: Insights from a Real-World Ransomware Investigation
Get technical insights based on forensic investigations of Vice Society (ransomware group carrying out double extortion attacks) conducted by our IR team.
Oren Biderman, Shani Adir Nissim, Noam Lifshitz, Eran Liloof, Or Zuckerman Farkash
2.09.2022
9 min
Threat Reports and Advisories Attack Techniques Malware Ransomware
Key Takeaways Leak of Conti crime group information
Shared thoughts and insights following our analysis of the leaked Conti (cyber crime group) information and the groups modus operandi.
Amnon Kushnir, Yoav Mazor, Noam Lifshitz, Etai Livne, Yoav Flint, Amir Becker
17.04.2022
5 min
subsctibe decor
Want to get in touch?
Contact us