Thanks, your request has been received

A member of our team will be in touch with you shortly.

YOU MAY FIND INTERESTING

Five Key Takeaways from Black Hat 2023

Hives & Frankensteins: The Half-Year Threat Report

Huch! Beim Absenden des Formulars ist etwas schief gelaufen.

Darktrace Analysis: Inside the SOC

Sliver C2: How Darktrace Provided a Sliver of Hope in the Face of an Emerging C2 Framework

Natalia Sánchez Rocafort

Balada Injector: Darktrace’s Investigation into the Malware Exploiting WordPress Vulnerabilities

A Thorn in Attackers’ Sides: How Darktrace Uncovered a CACTUS Ransomware Infection

This blog examines CACTUS, a relatively new strain of ransomware that first appeared in the threat landscape in March 2023. In November 2023, Darktrace detected CACTUS ransomware on a US customer network and was able to provide full visibility over the attack and its kill chain.

Continue reading

Bytesize Security

Bytesize security: Examining an insider exfiltrating corporate data from a Singaporean file server to Google Cloud

Bytesize security: Impersonation tactics fail to fool Darktrace AI

Bytesize security: HTML phishing attachments

On the Case: Incident Analysis

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Campaign Trail: Threat Research

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Tech Talk: Maximising Integrations

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Industry Insights: Systemic Change

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

GET IN TOUCH

Talk to our cyber experts

Vielen Dank! Ihre Anfrage ist eingegangen!

Huch! Beim Absenden des Formulars ist etwas schief gelaufen.

A Thorn in Attackers’ Sides: How Darktrace Uncovered a CACTUS Ransomware Infection

Sliver C2: How Darktrace Provided a Sliver of Hope in the Face of an Emerging C2 Framework

Natalia Sánchez Rocafort

Balada Injector: Darktrace’s Investigation into the Malware Exploiting WordPress Vulnerabilities

The Early Bird Catches the Worm: Darktrace’s Hunt for Raspberry Robin

Alexandra Sentenac

Socks5Systemz: How Darktrace’s Anomaly Detection Unraveled a Stealthy Botnet

Pikabot Malware: Battling a Fast-Moving Loader Malware in the Wild

Industry Insights

Identifying the Imposter: Darktrace’s Detection of Simulated Malware vs the Real Thing

Bytesize Security

Legitimate Services, Malicious Intentions: Getting the Drop on Phishing Attacks Abusing Dropbox

Incident Analysis

No Bad Luck for Darktrace: Combatting ALPHV BlackCat Ransomware

Quasar Remote Access Tool: When a Legitimate Admin Tool Falls into the Wrong Hands

Gootloader Malware: Detecting and Containing Multi-Functional Threats with Darktrace

Catching CoinLoader: Decrypting the Malware Hijacking Networks for Cryptomining Operations

No Smoke Without Fire: How Darktrace Extinguished the Threat of SmokeLoader Malware

Industry Insights

Post-Exploitation Activities of Ivanti CS/PS Appliances

Industry Insights

Broken Trust: Darktrace’s Detection of Trusted Network Relationship Abuse

Countering the Cartel: Darktrace’s Investigation into CyberCartel Attacks Targeting Latin America

Alexandra Sentenac

Entry via Sentry: Analyzing the Exploitation of a Critical Vulnerability in Ivanti Sentry

Industry Insights

Enemies on Our Teams: Darktrace Stops DarkGate Malware through Microsoft Teams

Natalia Sánchez Rocafort

Royal Pains: How Darktrace Refused to Bend the Knee to the MyKings Botnet

Oluwatosin Aturaka

PurpleFox in a Henhouse: How Darktrace Hunted Down a Persistent and Dynamic Rootkit

Piramol Krishnan

Not Your Average Rodent: Darktrace’s Mitigation of the Sectop Remote Access Trojan (RAT)

Using Darktrace for Threat Hunting

PlugX Malware: A RAT’s Race to Adapt and Survive

Nahisha Nobregas

Industry Insights

When Hallucinations Become Reality: An Exploration of AI Package Hallucination Attacks

Charlotte Thompson

Exposing a Demonic Threat: Darktrace’s Fight Against Malware Targeting Brazilian Organizations

ViperSoftX: How Darktrace Uncovered A Venomous Intrusion

Protecting Prospects: How Darktrace Detected an Account Hijack Within Days of Deployment

Black Basta: Old Dogs with New Tricks

Akira Ransomware: How Darktrace Foiled Another Novel Ransomware Attack

The Rise of the Lumma Info-Stealer | Malware-as-a-Service

Emily Megan Lim

Cutting Through the Noise: An Analysis of Post-Exploitation Activity on PaperCut Servers

Better the Devil You Know? Darktrace’s Detection of Unattributed Ransomware

Natalia Sánchez Rocafort

Admin Credential Abuse: How Darktrace Succeeded Where Other Solutions Failed

Shining a Light on Syssphinx: Darktrace’s Detection of a Novel Ransomware Attack

Detection of an Evasive Credential Harvester | IPFS Phishing

How Darktrace’s SOC Helped Thwart a BEC Attack in its Early Stages

Outlaw Returns: Uncovering Returning Features and New Tactics

Vendor Pretender: Detecting a Vendor Email Compromise in the Wild

Industry Insights

Phishing with QR Codes: How Darktrace Detected and Blocked the Bait

Alexandra Sentenac

CryptBot: How Darktrace foiled a fast-moving information stealer in just 2 seconds

Alexandra Sentenac

3CX Supply Chain Compromise: How Darktrace Uncovered A “Smooth Operator”

Nahisha Nobregas

How Abuse of ‘PerfectData Software’ May Create a Perfect Storm: An Emerging Trend in Account Takeovers

Darktrace’s Detection of a Hive Ransomware-as-Service

Emily Megan Lim

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

Gozi-ISFB:Darktrace’s Detection of the Malware with a Thousand Faces

Security Integrations: Enriching Darktrace with Microsoft Defender

Social Engineering: Detecting Malicious Email Activity from Both Known and Unknown Senders

Isabelle Cheong

Amadey Info-Stealer: Exploiting N-Day Vulnerabilities to Launch Information Stealing Malware

Industry Insights

Multi-Factor Authentication: Not the Silver Bullet

Laplas Clipper: Defending against crypto-currency thieves with DETECT + RESPOND

Anna Gilbertson

Industry Insights

How Compliance Breach Mitigation Can Prevent Compromise

Rachel Resnekov

Detect, Respond and Escalate: Preventing Further Compromise for Account Hijacks

Lydiane-Ashley Belle

A Surge of Vidar: Network-based details of a prolific info-stealer

Round-the-Clock Defense Against Cryptojackers using Darktrace AI

Victoria Baldie

Vidar Info-Stealer Malware Distributed via Malvertising on Google

Roberto Martinez

Qakbot Resurgence: Evolving along with the emerging threat landscape

Nahisha Nobregas

BlackMatter's Smash-and-Grab tactics and the need for RESPOND

The Darktrace Analyst Team

Bytesize security: Examining an insider exfiltrating corporate data from a Singaporean file server to Google Cloud

Industry Insights

Exploring the Cyber AI Loop as an Analyst: PREVENT/ASM & DETECT

Gabriel Hernandez

When to RESPOND?: Large-Scale Data Exfiltration

Anna Gilbertson

How Darktrace Could Have Stopped a Surprise DDoS Incident

[Part 1] Analysis of a Raccoon Stealer v1 Infection

Industry Insights

Inside the Yanluowang leak: Organization, members, and tactics

Taisiia Garkava

New technique to deliver malicious email payloads: Webmail login portal hidden within Google Translate domain

Rachel Resnekov

When speedy attacks aren’t enough: Prolonging Quantum Ransomware

Bytesize security: Impersonation tactics fail to fool Darktrace AI

Growing your onion: AutoIt malware in the Darktrace kill chain

Modern Extortion: Detecting Data Theft from the Cloud

Adrianne Marques

A thief in red: Compliance and the RedLine information stealer

From BumbleBee to Cobalt Strike: Steps of a BumbleBee intrusion

Detecting the unknown: revealing uncategorized ransomware using Darktrace

Emotet resurgence: cross-industry campaign analysis

Bytesize security: HTML phishing attachments

Industry Insights

Cyber Tactics in the Russo-Ukrainian Conflict

Industry Insights

Exploring the dangers of remote access tools

Using Self-Learning AI to defend against zero-day and N-day attacks

Industry Insights

Walking through the front door: Compromises of Internet-facing systems

Darktrace vs. Cobalt Strike: Wie Antigena einen Cobalt Strike-Angriff abfing und aufhielt

Kompromittierung von Geschäfts-E-Mails durch Massen-Phishing-Kampagne: Angriffsanalyse

Exploring a crypto-mining campaign which used the Log4j vulnerability

Aufschlüsselung einer Kompromittierung mehrerer Konten in Office 365

Worming Ausbreitung des Sysrv-hello Crypto-Jacking-Botnets: Analyse des Netzwerkverkehrs und die aktuellen TTPs

Darktrace KI erkennt und reagiert auf ausgehende Emotet-Malspam-Kampagne

Detection and guidance for the Confluence CVE-2022-26134 zero-Day

Gabriel Few-Wiegratz