Thanks, your request has been received

A member of our team will be in touch with you shortly.

YOU MAY FIND INTERESTING

Five Key Takeaways from Black Hat 2023

Hives & Frankensteins: The Half-Year Threat Report

Oops! Qualcosa è andato storto durante l'invio del modulo.

Darktrace Analysis: Inside the SOC

Sliver C2: How Darktrace Provided a Sliver of Hope in the Face of an Emerging C2 Framework

Natalia Sánchez Rocafort

Balada Injector: Darktrace’s Investigation into the Malware Exploiting WordPress Vulnerabilities

A Thorn in Attackers’ Sides: How Darktrace Uncovered a CACTUS Ransomware Infection

This blog examines CACTUS, a relatively new strain of ransomware that first appeared in the threat landscape in March 2023. In November 2023, Darktrace detected CACTUS ransomware on a US customer network and was able to provide full visibility over the attack and its kill chain.

Continue reading

Bytesize Security

Bytesize security: Examining an insider exfiltrating corporate data from a Singaporean file server to Google Cloud

Bytesize security: Impersonation tactics fail to fool Darktrace AI

Bytesize security: HTML phishing attachments

On the Case: Incident Analysis

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Campaign Trail: Threat Research

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Tech Talk: Maximising Integrations

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Industry Insights: Systemic Change

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

GET IN TOUCH

Talk to our cyber experts

Grazie! Il vostro invio è stato ricevuto!

Oops! Qualcosa è andato storto durante l'invio del modulo.

A Thorn in Attackers’ Sides: How Darktrace Uncovered a CACTUS Ransomware Infection

Sliver C2: How Darktrace Provided a Sliver of Hope in the Face of an Emerging C2 Framework

Natalia Sánchez Rocafort

Balada Injector: Darktrace’s Investigation into the Malware Exploiting WordPress Vulnerabilities

The Early Bird Catches the Worm: Darktrace’s Hunt for Raspberry Robin

Alexandra Sentenac

Socks5Systemz: How Darktrace’s Anomaly Detection Unraveled a Stealthy Botnet

Pikabot Malware: Battling a Fast-Moving Loader Malware in the Wild

Industry Insights

Identifying the Imposter: Darktrace’s Detection of Simulated Malware vs the Real Thing

Bytesize Security

Legitimate Services, Malicious Intentions: Getting the Drop on Phishing Attacks Abusing Dropbox

Incident Analysis

No Bad Luck for Darktrace: Combatting ALPHV BlackCat Ransomware

Quasar Remote Access Tool: When a Legitimate Admin Tool Falls into the Wrong Hands

Gootloader Malware: Detecting and Containing Multi-Functional Threats with Darktrace

Catching CoinLoader: Decrypting the Malware Hijacking Networks for Cryptomining Operations

No Smoke Without Fire: How Darktrace Extinguished the Threat of SmokeLoader Malware

Industry Insights

Post-Exploitation Activities of Ivanti CS/PS Appliances

Industry Insights

Broken Trust: Darktrace’s Detection of Trusted Network Relationship Abuse

Countering the Cartel: Darktrace’s Investigation into CyberCartel Attacks Targeting Latin America

Alexandra Sentenac

Entry via Sentry: Analyzing the Exploitation of a Critical Vulnerability in Ivanti Sentry

Industry Insights

Enemies on Our Teams: Darktrace Stops DarkGate Malware through Microsoft Teams

Natalia Sánchez Rocafort

Royal Pains: How Darktrace Refused to Bend the Knee to the MyKings Botnet

Oluwatosin Aturaka

PurpleFox in a Henhouse: How Darktrace Hunted Down a Persistent and Dynamic Rootkit

Piramol Krishnan

Not Your Average Rodent: Darktrace’s Mitigation of the Sectop Remote Access Trojan (RAT)

Using Darktrace for Threat Hunting

PlugX Malware: A RAT’s Race to Adapt and Survive

Nahisha Nobregas

Industry Insights

When Hallucinations Become Reality: An Exploration of AI Package Hallucination Attacks

Charlotte Thompson

Exposing a Demonic Threat: Darktrace’s Fight Against Malware Targeting Brazilian Organizations

ViperSoftX: How Darktrace Uncovered A Venomous Intrusion

Protecting Prospects: How Darktrace Detected an Account Hijack Within Days of Deployment

Black Basta: Old Dogs with New Tricks

Akira Ransomware: How Darktrace Foiled Another Novel Ransomware Attack

The Rise of the Lumma Info-Stealer | Malware-as-a-Service

Emily Megan Lim

Cutting Through the Noise: An Analysis of Post-Exploitation Activity on PaperCut Servers

Better the Devil You Know? Darktrace’s Detection of Unattributed Ransomware

Natalia Sánchez Rocafort

Admin Credential Abuse: How Darktrace Succeeded Where Other Solutions Failed

Shining a Light on Syssphinx: Darktrace’s Detection of a Novel Ransomware Attack

Detection of an Evasive Credential Harvester | IPFS Phishing

How Darktrace’s SOC Helped Thwart a BEC Attack in its Early Stages

Outlaw Returns: Uncovering Returning Features and New Tactics

Vendor Pretender: Detecting a Vendor Email Compromise in the Wild

Industry Insights

Phishing with QR Codes: How Darktrace Detected and Blocked the Bait

Alexandra Sentenac

CryptBot: How Darktrace foiled a fast-moving information stealer in just 2 seconds

Alexandra Sentenac

3CX Supply Chain Compromise: How Darktrace Uncovered A “Smooth Operator”

Nahisha Nobregas

How Abuse of ‘PerfectData Software’ May Create a Perfect Storm: An Emerging Trend in Account Takeovers

Darktrace’s Detection of a Hive Ransomware-as-Service

Emily Megan Lim

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

Gozi-ISFB:Darktrace’s Detection of the Malware with a Thousand Faces

Security Integrations: Enriching Darktrace with Microsoft Defender

Social Engineering: Detecting Malicious Email Activity from Both Known and Unknown Senders

Isabelle Cheong

Amadey Info-Stealer: Exploiting N-Day Vulnerabilities to Launch Information Stealing Malware

Industry Insights

Multi-Factor Authentication: Not the Silver Bullet

Laplas Clipper: Defending against crypto-currency thieves with DETECT + RESPOND

Anna Gilbertson

Industry Insights

How Compliance Breach Mitigation Can Prevent Compromise

Rachel Resnekov

Detect, Respond and Escalate: Preventing Further Compromise for Account Hijacks

Lydiane-Ashley Belle

A Surge of Vidar: Network-based details of a prolific info-stealer

Round-the-Clock Defense Against Cryptojackers using Darktrace AI

Victoria Baldie

Vidar Info-Stealer Malware Distributed via Malvertising on Google

Roberto Martinez

Qakbot Resurgence: Evolving along with the emerging threat landscape

Nahisha Nobregas

BlackMatter's Smash-and-Grab tactics and the need for RESPOND

The Darktrace Analyst Team

Bytesize security: Examining an insider exfiltrating corporate data from a Singaporean file server to Google Cloud

Industry Insights

Exploring the Cyber AI Loop as an Analyst: PREVENT/ASM & DETECT

Gabriel Hernandez

When to RESPOND?: Large-Scale Data Exfiltration

Anna Gilbertson

How Darktrace Could Have Stopped a Surprise DDoS Incident

[Part 1] Analysis of a Raccoon Stealer v1 Infection

Industry Insights

Inside the Yanluowang leak: Organization, members, and tactics

Taisiia Garkava

New technique to deliver malicious email payloads: Webmail login portal hidden within Google Translate domain

Rachel Resnekov

When speedy attacks aren’t enough: Prolonging Quantum Ransomware

Bytesize security: Impersonation tactics fail to fool Darktrace AI

Growing your onion: AutoIt malware in the Darktrace kill chain

Modern Extortion: Detecting Data Theft from the Cloud

Adrianne Marques

A thief in red: Compliance and the RedLine information stealer

From BumbleBee to Cobalt Strike: Steps of a BumbleBee intrusion

Detecting the unknown: revealing uncategorized ransomware using Darktrace

Emotet resurgence: cross-industry campaign analysis

Bytesize security: HTML phishing attachments

Industry Insights

Cyber Tactics in the Russo-Ukrainian Conflict

Industry Insights

Exploring the dangers of remote access tools

Using Self-Learning AI to defend against zero-day and N-day attacks

Industry Insights

Walking through the front door: Compromises of Internet-facing systems

Darktrace vs Cobalt Strike: How Antigena intercepted and delayed a Cobalt Strike intrusion

Business email compromise to mass phishing campaign: Attack analysis

Exploring a crypto-mining campaign which used the Log4j vulnerability

Breakdown of a multi-account compromise within Office 365

Worm-like propagation of Sysrv-hello crypto-jacking botnet: Network traffic analysis and latest TTPs

Darktrace AI detects and responds to Emotet outbound malspam campaign

Detection and guidance for the Confluence CVE-2022-26134 zero-Day

Gabriel Few-Wiegratz