Experienced a breach?
Contact us
Experienced a breach?
CONTACT US
Resource Type
Blog
Threat Reports and Advisories
Guides and tools
Datasheet
Webinars
Topics
Cloud
Incident Response
OT Security
Malware
Vulnerabilities
Attack Techniques
Detection
State Actors
Research
Forensics
Email
Cyber Crime
Ransomware
Mitigation and Response
Managed Detection and Response
Tabletop War Games
Threat Intelligence
Security Mitigation
VMware Security
Artificial intelligence (AI)
Threat Research
Blog Attack Techniques Cyber Crime Detection Ransomware
Velvet Ant’s Operation Highland: How a China-Nexus Actor Infiltrated an Internal Network Undetected
Discover the detailed forensic investigation by Sygnia into the sophisticated cyber attack by Velvet Ant on a major organization.
Chen Tiktin
8.06.2026
21 min
Blog Cyber Crime Incident Response Malware Ransomware
Inside a Sophisticated Recovery Scam Network: Evidence from a Live Investigation into Legal Services Impersonation
A live investigation into a global recovery scam network exploiting business impersonation, fake websites, and repeat victimization across industries.
Amir Sadon, Ronen Regev, Alon Eliassaf
5.02.2026
15 min
Blog Cyber Crime
Why Are Some Businesses Still Shunning Cyber Insurance?
Cyber-attacks can be a costly business, yet many firms aren’t taking out cyber insurance, according to the UK government’s Breaches Survey. Why is this?
Kate O’Flaherty, Cybersecurity and privacy journalist
1.07.2025
5 min
Blog Cyber Crime Detection Incident Response Research
Bybit – What We Know So Far
The February 2025 Bybit hack exposed critical security gaps across multiple domains. This summary compiles findings from various investigations, shedding light on the attackers’ tactics, industry-wide risks, and key lessons to enhance crypto security.
Sygnia Team
16.03.2025
12 min
Webinars Attack Techniques Cyber Crime Ransomware
On-Demand Webinar – Is Your Business Ready for the Next Nation-State Level Cyber-Attack?
Gain valuable insights from cybersecurity experts on evolving tactics, real-world attack scenarios, and proactive defense strategies.
On-Demand Webinar – Is Your Business Ready for the Next Nation-State Level Cyber-Attack?
18.09.2024
1 min
Blog Attack Techniques Cyber Crime Detection Ransomware
China-Nexus Threat Group ‘Velvet Ant’ Leverages a Zero-Day to Deploy Malware on Cisco Nexus Switches
Sygnia uncovers the China-Nexus group ‘Velvet Ant’ leveraging a zero-day exploit (CVE-2024-20399) on Cisco Switch appliances, escalating evasion tactics to maintain long-term network persistence.
Sygnia Team
22.08.2024
9 min
Blog Attack Techniques Cyber Crime Detection Ransomware
China-Nexus Threat Group ‘Velvet Ant’ Abuses F5 Load Balancers for Persistence
Discover the detailed forensic investigation by Sygnia into the sophisticated cyber attack by Velvet Ant on a major organization.
Sygnia Team
3.06.2024
22 min
Blog Attack Techniques Cyber Crime Detection Forensics Incident Response Malware Ransomware Research
Chapter 3 – Reversing DoSvc C++ using Ghidra – Part 1
In this chapter, we’ll finally get started on my favorite part: the reversing phase. Reversing is like looking for a needle in a haystack, so prepare yourselves, because things are about to get technical.
Binyamin Levine, Oleg Lerner
6.05.2024
18 min
Blog Attack Techniques Cyber Crime Detection Forensics Incident Response Malware Ransomware Research
Chapter 2 – Black Box Research
The intricacies of WUDO (Windows Update Delivery Optimization).
Binyamin Levine, Oleg Lerner
16.04.2024
23 min
Blog Attack Techniques Cyber Crime Detection Forensics Incident Response Malware Ransomware Research
Chapter 1 – Introduction
The intricacies of WUDO (Windows Update Delivery Optimization).
Binyamin Levine, Oleg Lerner
1.04.2024
6 min
Blog Attack Techniques Cyber Crime Detection Forensics Incident Response Malware Ransomware Research
The Anatomy of a BlackCat (ALPHV) Attack
Explore the thwarted cyber extortion attempt by the BlackCat ransomware group, unraveled by Sygnia's Incident Response team in 2023.
Oren Biderman, Amir Sadon
5.03.2024
28 min
Blog Attack Techniques Cyber Crime Detection Email Malware Research
Sygnia Annual Field Report
From relentless adversaries to resilient businesses, the Sygnia Annual Field Report offers unique insights and strategic guidance to strengthen your cybersecurity defenses against the ever-evolving threat landscape.
Sygnia Team
14.02.2024
4 min
Solutions
Blog Attack Techniques Cyber Crime Detection Email Malware Research
Breaking Down the Casbaneiro Infection Chain – Part II
Since 2018, the Casbaneiro banking trojan has targeted Latin American financial sectors. Sygnia monitors it closely as a major threat to multi-regional financial organizations.
Amir Sadon, Ohad Amar, Dor Nizar, Shani Adir
25.07.2023
10 min
Blog Guides and tools Attack Techniques Cyber Crime Detection Email Malware Research
Case Study: cracking a global Adversary-In-The-Middle campaign using a threat intelligence toolkit
Using a variety of CTI enrichment techniques Sygnia was able to determine that the BEC attack was only a part of a much wider campaign, potentially impacting dozens of world-wide organizations.
Amir Sadon, Dor Fenigshtein, Shani Adir Nissim, Amnon Kushnir , Ori Porag
13.06.2023
17 min
Blog Attack Techniques Cyber Crime Detection Email Malware Research
Breaking Down the Casbaneiro Infection Chain
The Casbaneiro banking trojan targets financial organizations to steal user data for financial gain. Get a detailed “attacker fingerprint”.
Dan Saunders, Omri Bavly, Noam Lifshitz, Itay Shohat
7.04.2022
14 min
subsctibe decor
Want to get in touch?
Contact us