Threat Research & Intelligence

TDR

Sold to the Highest Bidder: The Escalation of ADINT from Geolocation Tracking to Intrusion Vector

Discover how private companies repurpose the advertising ecosystem into a global surveillance apparatus.

June 25, 2026

Threat Detection & Research Team

Maxime ARQUILLIERE

Coline CHAVANE

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

Latest blogs

Threat Research & Intelligence

TDR

April 7, 2022

Mars, a red-hot information stealer

Mars Stealer is an information stealer sold on underground forums by MarsTeam since June 22, 2021, with the malware-as-a-service model.

Pierre LE BOURHIS

Quentin BOURGUE

Threat Detection & Research Team

Detection Engineering

Product News

March 29, 2022

Improving Threat Detection with Sigma Correlations

Today, we are adding Sigma Correlations support to the SEKOIA.IO threat detection capabilities! In this post, we discuss what can be done with it, and why it was needed.

Upscaling Team

Threat Research & Intelligence

TDR

March 23, 2022

Lapsus$: when kiddies play in the big league

The extorsion group Lapsus$ that already succeeded in breaching several high profile companies is running riot and sowing confusion. In this blogpost, our Threat & Detection Research team answers your interrogations by drawing the profile of the grou

Livia TIBIRNA

Narimane LAVAY

Threat Detection & Research Team

Threat Research & Intelligence

TDR

March 7, 2022

A war on multiple fronts – the turbulent cybercrime landscape

In this blog post, we will focus on developments in the world of cybercrime (which supposedly do not involve nation-state threat actors) in the current war context.

Livia TIBIRNA

Threat Detection & Research Team

Threat Research & Intelligence

TDR

February 25, 2022

The story of a ransomware builder: from Thanos to Spook and beyond (Part 2)

Ransomware spook : In this part 2, you will discover how to handle such evil sightings and neutralize them before impact

Kilian SEZNEC

Livia TIBIRNA

Threat Detection & Research Team

Threat Research & Intelligence

TDR

February 24, 2022

Invasion of Ukraine – what implications in cyberspace?

Our analysts and researchers use this very specific context to provide an overview of the current state of cybercrime.

Livia TIBIRNA

Threat Detection & Research Team

Threat Research & Intelligence

February 17, 2022

The story of a ransomware builder: from Thanos to Spook and beyond (Part 1)

In this article, we show how the CERT Sekoia came across Spook, and what they found when looking under the hood

Sekoia CERT

Threat Research & Intelligence

TDR

January 6, 2022

NOBELIUM’s EnvyScout infection chain goes in the registry, targeting embassies

NOBELIUM is another name for the APT29 intrusion set, operated by a threat actor allegedly linked to the SVR

Félix AIME

Threat Detection & Research Team

Threat Research & Intelligence

TDR

December 13, 2021

Log4Shell: the defender’s worst nightmare ?

In this blogpost, our Threat & Detection Research team answers your interrogations on Log4Shell.

Félix AIME

Threat Detection & Research Team

Product News

December 3, 2021

SIGMA, design and MITRE ATT&CK… new features of the XDR and CTI platform

Discover in this article, all the news features of Sekoia XDR and CTI platform (SIGMA, design and MITRE ATT&CK).

Upscaling Team

Threat Research & Intelligence

TDR

November 10, 2021

Walking on APT31 infrastructure footprints

APT31 is an Advanced Persistent Threat group whose mission is likely to gather intelligence on behalf of the Chinese government.

Félix AIME

Product News

November 5, 2021

Centralization of EDR alerts, new detections and trackers… the novelties of November 2021

Our platform continues to reinvent itself and evolve by regularly integrating new features while improving existing features.

Upscaling Team

Product News

October 4, 2021

Detail of an alert, observable database, new exclusive source … the novelties of October 2021

In this article, you will discover all the news features while improving existing features of sekoia.io platform.

Upscaling Team

Detection Engineering

TDR

August 19, 2021

An insider insights into Conti operations – Part Two

This is the second part of our blogpost about Conti, here we'll see how to detect Conti Operations techniques and much more.

Quentin BOURGUE

Erwan CHEVALIER

Guillaume COUCHARD

Threat Detection & Research Team

Detection Engineering

TDR

August 17, 2021

An insider insights into Conti operations - Part One

In this part 2, we focus on the Conti ransomware group whose training material was recently leaked on a cybercrime forum.

Guillaume COUCHARD

Livia TIBIRNA

Erwan CHEVALIER

Narimane LAVAY

Threat Detection & Research Team

Product News

August 10, 2021

Ideation process at Sekoia.io

To remain ahead of the curve, we use an ideation process that allows us to shape our next features. Read and discover our ideation process.

Upscaling Team

Threat Detection & Research team

Sekoia Threat Detection & Research team, commonly known as the TDR team, is the driving force behind the Sekoia SOC platform, delivering exclusive threat intelligence.

Meet TDR team

Read latest TDR articles