TDR Team

This blog post provides an in-depth analysis of PikaBot, focusing on its anti-analysis techniques implemented in the different malware stages.

Uncover the details of the DoppelGänger campaign, a Russian influence operation aimed at undermining support for Ukraine.

Learn how Sekoia.io stay ahead of the curve with sophisticated detection engineering strategies and proactive threat anticipation.

Learn about the techniques used by the Mallox ransomware affiliate to compromise an MS-SQL server. Dive into our detailed technical analysis.

Sekoia TDR analysts conduct an assessment of threats regarding the major elections that will occur in 2024.

Learn about our process for collecting telemetry data from PlugX worm-infected workstations, as well as how to disinfect them.

A broad introduction to AWS logs sources and relevant events for detection engineering.

Tycoon 2FA has become one of the most widespread AiTM phishing kits over the last few months.

Discover the growing threat of residential proxies, their role in hiding among legitimate traffic and the challenges they pose in cyberspace.

In this report, we introduce key concepts and analyse the different crypter-related activities and the lucrative ecosystem of threat groups leveraging them in malicious campaigns.

Learn about NoName057(16), a pro-Russian hacktivist group behind Project DDoSia targeting entities supporting Ukraine. Discover an overview of the changes made by the group, both from the perspective of the software shared by the group to generate DD

Discover our TDR team's revelations about Predator spyware: its C2 infrastructure and list of countries still using its cyber espionage tool.