https://intel.mjolnirsecurity.com/ Threat intelligence research, malware analysis, and breach reports from the Mjolnir Security research team. en-us Sat, 07 Mar 2026 00:00:00 +0000 https://intel.mjolnirsecurity.com/ms_sec-logo.png https://intel.mjolnirsecurity.com/ https://intel.mjolnirsecurity.com/redline-stealer.html https://intel.mjolnirsecurity.com/redline-stealer.html Thu, 05 Mar 2026 00:00:00 +0000 Analysis of RedLine Stealer, the MaaS infostealer responsible for 51% of all infostealer infections, its Operation Magnus takedown, and defense strategies. Threat Intelligence Malware https://intel.mjolnirsecurity.com/cobalt-strike.html https://intel.mjolnirsecurity.com/cobalt-strike.html Fri, 20 Feb 2026 00:00:00 +0000 Deep analysis of Cobalt Strike, the commercial red team framework exploited by APT29, APT41, Conti, and LockBit. Covers Beacon payloads, Malleable C2, Operation Morpheus, and defense strategies. Threat Intelligence Malware https://intel.mjolnirsecurity.com/systembc-malware.html https://intel.mjolnirsecurity.com/systembc-malware.html Sun, 08 Feb 2026 00:00:00 +0000 Analysis of SystemBC, the SOCKS5 proxy backdoor with TOR integration used by Ryuk, Conti, DarkSide, and Black Basta ransomware operations. Threat Intelligence Malware https://intel.mjolnirsecurity.com/latrodectus-malware.html https://intel.mjolnirsecurity.com/latrodectus-malware.html Thu, 22 Jan 2026 00:00:00 +0000 Analysis of Latrodectus, the Windows malware loader succeeding IcedID with advanced sandbox evasion, AES-256 encryption, and ClickFix social engineering. Threat Intelligence Malware https://intel.mjolnirsecurity.com/tofsee-botnet.html https://intel.mjolnirsecurity.com/tofsee-botnet.html Fri, 09 Jan 2026 00:00:00 +0000 Analysis of Tofsee (Gheg), the modular spam botnet active since 2013 with crypto mining, DDoS, social media spreading, and proxy modules. Threat Intelligence Malware https://intel.mjolnirsecurity.com/njrat-malware.html https://intel.mjolnirsecurity.com/njrat-malware.html Thu, 18 Dec 2025 00:00:00 +0000 Analysis of NjRAT (Bladabindi), the leaked-source .NET RAT active since 2012 with keylogging, MBR wiping, USB worm, and DDoS capabilities. Threat Intelligence Malware https://intel.mjolnirsecurity.com/dcrat-malware.html https://intel.mjolnirsecurity.com/dcrat-malware.html Wed, 03 Dec 2025 00:00:00 +0000 Analysis of DcRAT (Dark Crystal RAT), the $5-7 .NET MaaS RAT with 34 plugins, dedicated IDE, and usage by threat actors targeting Ukrainian defense. Threat Intelligence Malware https://intel.mjolnirsecurity.com/china-apt-global-activity-2026.html https://intel.mjolnirsecurity.com/china-apt-global-activity-2026.html Tue, 03 Mar 2026 00:00:00 +0000 24-hour intelligence snapshot analyzing 22,705 hostile activities from 3,321 Chinese source IPs targeting 4 European nations, with attribution to APT10, APT27, Mustang Panda, APT41, and Volt Typhoon. Threat Intelligence APT https://intel.mjolnirsecurity.com/sandworm-mode-npm-campaign.html https://intel.mjolnirsecurity.com/sandworm-mode-npm-campaign.html Sat, 01 Mar 2026 00:00:00 +0000 A malicious npm campaign exploiting AI coding assistants and Model Context Protocol servers through 19 trojanized packages targeting the software supply chain. Threat Intelligence Malware https://intel.mjolnirsecurity.com/iranian-cyber-threat-update-march-2026.html https://intel.mjolnirsecurity.com/iranian-cyber-threat-update-march-2026.html Sat, 28 Feb 2026 00:00:00 +0000 Updated analysis of Iranian state-sponsored cyber operations amid escalating geopolitical tensions, targeting critical infrastructure in the US, Israel, and allied nations. Threat Intelligence https://intel.mjolnirsecurity.com/salt-typhoon-analysis.html https://intel.mjolnirsecurity.com/salt-typhoon-analysis.html Fri, 17 Jan 2026 00:00:00 +0000 Deep-dive into Salt Typhoon, a Chinese state-sponsored APT that compromised major US telecom providers to intercept communications of senior government officials. Threat Intelligence https://intel.mjolnirsecurity.com/cve-2025-10035-goanywhere.html https://intel.mjolnirsecurity.com/cve-2025-10035-goanywhere.html Tue, 23 Sep 2025 00:00:00 +0000 Analysis of CVE-2025-10035, a critical CVSS 10.0 vulnerability in Fortra GoAnywhere MFT, and its strategic implications for Canadian businesses. Breach https://intel.mjolnirsecurity.com/convergence-of-chaos-blog.html https://intel.mjolnirsecurity.com/convergence-of-chaos-blog.html Sun, 14 Sep 2025 00:00:00 +0000 How Lapsus$, ShinyHunters, and Scattered Spider merged into one of the most brazen cybercrime collectives and what it means for enterprise security. Threat Intelligence Breach https://intel.mjolnirsecurity.com/iranian-cyber-threats.html https://intel.mjolnirsecurity.com/iranian-cyber-threats.html Wed, 01 Oct 2025 00:00:00 +0000 Comprehensive analysis of Iranian state-sponsored APT groups including Charming Kitten, APT33, and APT34 targeting critical infrastructure. Threat Intelligence https://intel.mjolnirsecurity.com/vpn-breach-sonicwall.html https://intel.mjolnirsecurity.com/vpn-breach-sonicwall.html Fri, 29 Aug 2025 00:00:00 +0000 SonicWall VPN zero-day vulnerability enables threat actors to sell unauthorized corporate network access on dark web forums across North America. Breach https://intel.mjolnirsecurity.com/ransomhub-analysis.html https://intel.mjolnirsecurity.com/ransomhub-analysis.html Wed, 27 Aug 2025 00:00:00 +0000 From ALPHV's exit scam to the most prolific RaaS operation of 2024 and its hostile takeover by DragonForce. A complete threat analysis. Malware Ransomware https://intel.mjolnirsecurity.com/qilin-ransomware.html https://intel.mjolnirsecurity.com/qilin-ransomware.html Tue, 15 Jul 2025 00:00:00 +0000 Deep dive into the Qilin ransomware group, their TTPs, cross-platform capabilities, and proactive defense strategies. Malware Ransomware https://intel.mjolnirsecurity.com/akira-ransomware.html https://intel.mjolnirsecurity.com/akira-ransomware.html Tue, 24 Jun 2025 00:00:00 +0000 Technical analysis of the Akira ransomware group including attack vectors, encryption techniques, and defense recommendations. Malware Ransomware https://intel.mjolnirsecurity.com/countering-apts.html https://intel.mjolnirsecurity.com/countering-apts.html Mon, 02 Jun 2025 00:00:00 +0000 Strategic guide to understanding and defending against APTs with focus on detection frameworks, threat hunting, and organizational resilience. Threat Intelligence https://intel.mjolnirsecurity.com/blacksuit-ransomware.html https://intel.mjolnirsecurity.com/blacksuit-ransomware.html Thu, 09 May 2024 00:00:00 +0000 Analysis of BlackSuit ransomware, the evolution from Royal ransomware, and the group's sophisticated attack methodology. Malware Ransomware https://intel.mjolnirsecurity.com/bad-rabbit-diskcoder.html https://intel.mjolnirsecurity.com/bad-rabbit-diskcoder.html Tue, 24 Oct 2017 00:00:00 +0000 Analysis of Bad Rabbit ransomware, a modified variant of Not Petya targeting Ukraine and Russia via drive-by downloads and SMB propagation. Malware Ransomware https://intel.mjolnirsecurity.com/apt27-threat-group.html https://intel.mjolnirsecurity.com/apt27-threat-group.html Sat, 28 Feb 2026 00:00:00 +0000 Threat intelligence analysis of apt 27. APT https://intel.mjolnirsecurity.com/apt-barium.html https://intel.mjolnirsecurity.com/apt-barium.html Wed, 25 Feb 2026 00:00:00 +0000 Threat intelligence analysis of apt barium. APT https://intel.mjolnirsecurity.com/apt-bisonal.html https://intel.mjolnirsecurity.com/apt-bisonal.html Mon, 23 Feb 2026 00:00:00 +0000 Threat intelligence analysis of apt bisonal. APT https://intel.mjolnirsecurity.com/apt-bitter.html https://intel.mjolnirsecurity.com/apt-bitter.html Sat, 21 Feb 2026 00:00:00 +0000 Threat intelligence analysis of apt bitter. APT https://intel.mjolnirsecurity.com/apt-charmingkitten.html https://intel.mjolnirsecurity.com/apt-charmingkitten.html Fri, 20 Feb 2026 00:00:00 +0000 Threat intelligence analysis of apt charmingkitten. APT https://intel.mjolnirsecurity.com/apt-earthkurma.html https://intel.mjolnirsecurity.com/apt-earthkurma.html Fri, 20 Feb 2026 00:00:00 +0000 Threat intelligence analysis of apt earthkurma. APT https://intel.mjolnirsecurity.com/apt-gamaredon.html https://intel.mjolnirsecurity.com/apt-gamaredon.html Fri, 20 Feb 2026 00:00:00 +0000 Threat intelligence analysis of apt gamaredon. APT https://intel.mjolnirsecurity.com/apt-ghostemperor.html https://intel.mjolnirsecurity.com/apt-ghostemperor.html Wed, 18 Feb 2026 00:00:00 +0000 Threat intelligence analysis of apt ghostemperor. APT https://intel.mjolnirsecurity.com/apt-goldmouse.html https://intel.mjolnirsecurity.com/apt-goldmouse.html Tue, 17 Feb 2026 00:00:00 +0000 Threat intelligence analysis of apt goldmouse. APT https://intel.mjolnirsecurity.com/apt-kimsuky.html https://intel.mjolnirsecurity.com/apt-kimsuky.html Fri, 13 Feb 2026 00:00:00 +0000 Threat intelligence analysis of apt kimsuky. APT https://intel.mjolnirsecurity.com/apt-lazarus.html https://intel.mjolnirsecurity.com/apt-lazarus.html Tue, 10 Feb 2026 00:00:00 +0000 Threat intelligence analysis of apt lazarus. APT https://intel.mjolnirsecurity.com/apt-lotusblossom.html https://intel.mjolnirsecurity.com/apt-lotusblossom.html Mon, 09 Feb 2026 00:00:00 +0000 Threat intelligence analysis of apt lotusblossom. APT https://intel.mjolnirsecurity.com/apt-luckycat.html https://intel.mjolnirsecurity.com/apt-luckycat.html Mon, 09 Feb 2026 00:00:00 +0000 Threat intelligence analysis of apt luckycat. APT https://intel.mjolnirsecurity.com/apt-menupass.html https://intel.mjolnirsecurity.com/apt-menupass.html Sun, 08 Feb 2026 00:00:00 +0000 Threat intelligence analysis of apt menupass. APT https://intel.mjolnirsecurity.com/apt-muddywater.html https://intel.mjolnirsecurity.com/apt-muddywater.html Wed, 04 Feb 2026 00:00:00 +0000 Threat intelligence analysis of apt muddywater. APT https://intel.mjolnirsecurity.com/apt-mustangpanda.html https://intel.mjolnirsecurity.com/apt-mustangpanda.html Tue, 03 Feb 2026 00:00:00 +0000 Threat intelligence analysis of apt mustangpanda. APT https://intel.mjolnirsecurity.com/apt-onyxsleet.html https://intel.mjolnirsecurity.com/apt-onyxsleet.html Thu, 29 Jan 2026 00:00:00 +0000 Threat intelligence analysis of apt onyxsleet. APT https://intel.mjolnirsecurity.com/apt-patchwork.html https://intel.mjolnirsecurity.com/apt-patchwork.html Tue, 27 Jan 2026 00:00:00 +0000 Threat intelligence analysis of apt patchwork. APT https://intel.mjolnirsecurity.com/apt-polonium.html https://intel.mjolnirsecurity.com/apt-polonium.html Tue, 27 Jan 2026 00:00:00 +0000 Threat intelligence analysis of apt polonium. APT https://intel.mjolnirsecurity.com/apt-sharppanda.html https://intel.mjolnirsecurity.com/apt-sharppanda.html Mon, 26 Jan 2026 00:00:00 +0000 Threat intelligence analysis of apt sharppanda. APT https://intel.mjolnirsecurity.com/apt-silentlynx.html https://intel.mjolnirsecurity.com/apt-silentlynx.html Fri, 23 Jan 2026 00:00:00 +0000 Threat intelligence analysis of apt silentlynx. APT https://intel.mjolnirsecurity.com/apt-sofacy.html https://intel.mjolnirsecurity.com/apt-sofacy.html Wed, 21 Jan 2026 00:00:00 +0000 Threat intelligence analysis of apt sofacy. APT https://intel.mjolnirsecurity.com/apt-ta416.html https://intel.mjolnirsecurity.com/apt-ta416.html Fri, 16 Jan 2026 00:00:00 +0000 Threat intelligence analysis of apt ta416. APT https://intel.mjolnirsecurity.com/apt-transparenttribe.html https://intel.mjolnirsecurity.com/apt-transparenttribe.html Fri, 16 Jan 2026 00:00:00 +0000 Threat intelligence analysis of apt transparenttribe. APT https://intel.mjolnirsecurity.com/apt-unc2596.html https://intel.mjolnirsecurity.com/apt-unc2596.html Thu, 15 Jan 2026 00:00:00 +0000 Threat intelligence analysis of apt unc2596. APT https://intel.mjolnirsecurity.com/apt-unc4841.html https://intel.mjolnirsecurity.com/apt-unc4841.html Wed, 14 Jan 2026 00:00:00 +0000 Threat intelligence analysis of apt unc4841. APT https://intel.mjolnirsecurity.com/apt-unc5174.html https://intel.mjolnirsecurity.com/apt-unc5174.html Sat, 10 Jan 2026 00:00:00 +0000 Threat intelligence analysis of apt unc5174. APT https://intel.mjolnirsecurity.com/apt-unclassified-threats.html https://intel.mjolnirsecurity.com/apt-unclassified-threats.html Fri, 09 Jan 2026 00:00:00 +0000 Threat intelligence analysis of apt unclassified. APT https://intel.mjolnirsecurity.com/apt-venomspider.html https://intel.mjolnirsecurity.com/apt-venomspider.html Fri, 09 Jan 2026 00:00:00 +0000 Threat intelligence analysis of apt venomspider. APT https://intel.mjolnirsecurity.com/fin6-threat-group.html https://intel.mjolnirsecurity.com/fin6-threat-group.html Thu, 08 Jan 2026 00:00:00 +0000 Threat intelligence analysis of fin6. APT https://intel.mjolnirsecurity.com/fin7-threat-group.html https://intel.mjolnirsecurity.com/fin7-threat-group.html Wed, 07 Jan 2026 00:00:00 +0000 Threat intelligence analysis of fin7. APT https://intel.mjolnirsecurity.com/ta2727-threat-group.html https://intel.mjolnirsecurity.com/ta2727-threat-group.html Tue, 06 Jan 2026 00:00:00 +0000 Threat intelligence analysis of ta2727. APT https://intel.mjolnirsecurity.com/4l4md4r-ransomware.html https://intel.mjolnirsecurity.com/4l4md4r-ransomware.html Sun, 04 Jan 2026 00:00:00 +0000 Threat intelligence analysis of 4l4md4r ransomware. Ransomware https://intel.mjolnirsecurity.com/bianlian-ransomware.html https://intel.mjolnirsecurity.com/bianlian-ransomware.html Sat, 03 Jan 2026 00:00:00 +0000 Threat intelligence analysis of bianlian. Ransomware https://intel.mjolnirsecurity.com/blackbyte-ransomware.html https://intel.mjolnirsecurity.com/blackbyte-ransomware.html Sat, 03 Jan 2026 00:00:00 +0000 Threat intelligence analysis of blackbyte. Ransomware https://intel.mjolnirsecurity.com/hive-ransomware.html https://intel.mjolnirsecurity.com/hive-ransomware.html Fri, 02 Jan 2026 00:00:00 +0000 Threat intelligence analysis of hive ransomware. Ransomware https://intel.mjolnirsecurity.com/interlock-ransomware.html https://intel.mjolnirsecurity.com/interlock-ransomware.html Sun, 28 Dec 2025 00:00:00 +0000 Threat intelligence analysis of interlock. Ransomware https://intel.mjolnirsecurity.com/lockbit-ransomware.html https://intel.mjolnirsecurity.com/lockbit-ransomware.html Fri, 26 Dec 2025 00:00:00 +0000 Threat intelligence analysis of lockbit. Ransomware https://intel.mjolnirsecurity.com/mamona-ransomware.html https://intel.mjolnirsecurity.com/mamona-ransomware.html Thu, 25 Dec 2025 00:00:00 +0000 Threat intelligence analysis of mamona. Ransomware https://intel.mjolnirsecurity.com/medusalocker-ransomware.html https://intel.mjolnirsecurity.com/medusalocker-ransomware.html Thu, 25 Dec 2025 00:00:00 +0000 Threat intelligence analysis of medusalocker. Ransomware https://intel.mjolnirsecurity.com/rhysida-ransomware.html https://intel.mjolnirsecurity.com/rhysida-ransomware.html Wed, 24 Dec 2025 00:00:00 +0000 Threat intelligence analysis of rhysida. Ransomware https://intel.mjolnirsecurity.com/ryuk-ransomware.html https://intel.mjolnirsecurity.com/ryuk-ransomware.html Tue, 23 Dec 2025 00:00:00 +0000 Threat intelligence analysis of ryuk. Ransomware https://intel.mjolnirsecurity.com/snatch-ransomware.html https://intel.mjolnirsecurity.com/snatch-ransomware.html Sat, 20 Dec 2025 00:00:00 +0000 Threat intelligence analysis of snatch. Ransomware https://intel.mjolnirsecurity.com/adwind-rat.html https://intel.mjolnirsecurity.com/adwind-rat.html Sat, 20 Dec 2025 00:00:00 +0000 Threat intelligence analysis of adwind. RAT https://intel.mjolnirsecurity.com/agenttesla-rat.html https://intel.mjolnirsecurity.com/agenttesla-rat.html Fri, 19 Dec 2025 00:00:00 +0000 Threat intelligence analysis of agenttesla. RAT https://intel.mjolnirsecurity.com/ammyy-rat.html https://intel.mjolnirsecurity.com/ammyy-rat.html Fri, 19 Dec 2025 00:00:00 +0000 Threat intelligence analysis of ammyyrat. RAT https://intel.mjolnirsecurity.com/asyncrat.html https://intel.mjolnirsecurity.com/asyncrat.html Fri, 19 Dec 2025 00:00:00 +0000 Threat intelligence analysis of asyncrat. RAT https://intel.mjolnirsecurity.com/avemaria-rat.html https://intel.mjolnirsecurity.com/avemaria-rat.html Fri, 19 Dec 2025 00:00:00 +0000 Threat intelligence analysis of avemaria. RAT https://intel.mjolnirsecurity.com/bifrost-rat.html https://intel.mjolnirsecurity.com/bifrost-rat.html Mon, 15 Dec 2025 00:00:00 +0000 Threat intelligence analysis of bifrost. RAT https://intel.mjolnirsecurity.com/bitrat.html https://intel.mjolnirsecurity.com/bitrat.html Mon, 08 Dec 2025 00:00:00 +0000 Threat intelligence analysis of bitrat. RAT