A WhatsApp-delivered financial document lure carried Statement.exe into a multistage Windows intrusion. After unpacking, the loader screened the host, attempted elevation, and injected a downloader ...
RevStealer is a Windows information stealer delivered inside a trojanized Electron desktop application that impersonates legitimate software. Morphisec Threat Labs observed it distributed through ...
During April 2026, Morphisec prevented multiple intrusion attempts against education and financial organizations and uncovered a significantly evolved version of the BabaDeda loader family. Earlier ...
Back in September 2025, we published “The NPM Worm That No One’s Talking About—But Everyone Should Be.” In February 2026, we followed it with “Can We Talk About This Now? Shai-Hulud Wave 2 Targeting ...
Endpoint Detection and Response (EDR) fundamentally changed enterprise cybersecurity. For the past decade, EDR platforms have given security teams unprecedented visibility into endpoint activity, ...
As the geopolitical landscape continues to evolve, Morphisec Threat Labs is bringing technical focus to threats that have gone under-analyzed. Pay2Key, an Iranian-attributed ransomware group, has not ...
Artificial intelligence has revolutionized almost every aspect of business — and cybersecurity is no exception. Unfortunately, the same machine learning that helps defenders detect anomalies is now ...
Hey folks in the threat hunting world – it looks like our coverage of the Noodlophile infostealer has struck a nerve with its creators. Back in May 2025, Morphisec first uncovered this sneaky piece of ...
Ransomware isn’t slowing down. It’s scaling, adapting, and finding new ways to slip past defenses that many organizations still trust implicitly. The Ransomware Reality Check 2026 infographic paints a ...
On January 20, 2026, Morphisec identified an active supply chain compromise affecting MicroWorld Technologies’ eScan antivirus product. Malicious updates were distributed through eScan’s legitimate ...
When Malware Hides in Plain Sight: How Morphisec Blocked a Tuoni C2 Attack Before It Became a Breach
Cybercriminals no longer just launch ransomware. They infiltrate quietly, blend in, harvest credentials, and wait (sometimes for months) before striking. That’s exactly what Morphisec Threat Labs ...
The CTO briefing revealed several real-world techniques attackers used recently against organizations protected by leading EDR tools. Many of these attacks went undetected for weeks. 1. Azure Copy ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results