ABOUT
CVE DATABASE
CONTACT
VISIT SENTINELONE.COM
Security Research

Cloud Malware | A Threat Hunter’s Guide to Analysis, Techniques and Delivery

Learn about cloud threats, how to hunt for them and how to analyze them in this post based on Alex Delamotte's recent LABScon workshop.

Read More
China Influence Feature
Security & Intelligence

China’s Influence Ops | Twisting Tales of Volt Typhoon at Home and Abroad
Dakota Cary /

China's CVERC attempts to attribute Volt Typhoon activities to the U.S., but the fact-free claims reveal much about the PRC's real agenda.

Read More
Kryptina Desert Ftr
Crimeware

Kryptina RaaS | From Unsellable Cast-Off to Enterprise Ransomware
Jim Walter /

Kryptina's adoption by Mallox affiliates complicates malware tracking as ransomware operators blend different codebases into new variants.

Read More
Zuzana Labscon23
LABScon

LABScon23 Replay | They Spilled Oil in My Health-Boosting Smoothie
LABScon /

Zuzana Hromcová explores how Iran-aligned APT OilRig targets healthcare and local governments with a stream of updated and newly developed tools.

Read More
Exploring VT Bus Ftr
Security Research

Exploring the VirusTotal Dataset | An Analyst’s Guide to Effective Threat Research
Aleksandar Milenkoski & Jose Luis Sánchez Martínez (VirusTotal) /

We teamed up with VirusTotal to take a deep dive into the platform's extensive query capabilities through both the web and API interfaces.

Read More
Martin Wendiggensen LC23 Ftr
LABScon

LABScon23 Replay | Black Magic – Influence Operations in the Open and At-Scale in Hungary
LABScon /

As electorates across the US and Europe go to the polls in 2024, this must-see talk on large-scale state influence operations could hardly be more timely or relevant.

Read More
Xeon Dive Bg
Crimeware

Xeon Sender | SMS Spam Shipping Multi-Tool Targeting SaaS Credentials
Alex Delamotte /

Cloud attack tool has been repurposed by multiple threat actors to push SMS spam and smishing campaigns through major SaaS providers.

Read More
FIN7 AvNeuralizer Ftr
Adversary

FIN7 Reboot | Cybercrime Gang Enhances Ops with New EDR Bypasses and Automated Attacks
Antonio Cocomazzi /

This research explores how FIN7 has adopted automated attack methods and developed defense evasion techniques previously unseen in the wild.

Read More
NullBulge Ransomware Threat Actor Masquerades As Hacktivist Group Rebelling Against AI2
Crimeware

NullBulge | Threat Actor Masquerades as Hacktivist Group Rebelling Against AI
Jim Walter /

Actors are masquerading as hacktivists targeting AI-centric communities with commodity malware and customized LockBit payloads.

Read More
Capra Remix V2 Ftr
Adversary

CapraTube Remix | Transparent Tribe’s Android Spyware Targeting Gamers, Weapons Enthusiasts
Alex Delamotte /

SentinelLabs has identified four new CapraRAT APKs associated with suspected Pakistan state-aligned actor Transparent Tribe.

Read More
ChamelGang Ftr 5
Advanced Persistent Threat

ChamelGang & Friends | Cyberespionage Groups Attacking Critical Infrastructure with Ransomware
Aleksandar Milenkoski & Julian-Ferdinand Vögele (Recorded Future) /

Threat actors in the cyberespionage ecosystem are using ransomware for financial gain, disruption, distraction, misattribution, and the removal of evidence.

Read More
1 2 3 … 21