The dark side of 2023 Cybersecurity: Malware evolution and Cyber threats

January 25, 2024 | Fernando Martinez

Hunter

ProxyNation: The dark nexus between proxy apps and malware

August 16, 2023 | Ofer Caspi

Executive summary LevelBlue Labs researchers recently discovered a massive ...

BlackGuard stealer extends its capabilities in new variant

March 23, 2023 | Ofer Caspi

LevelBlue Labs researchers have discovered a new variant of BlackGuard stealer ...

Crypto miners’ latest techniques

August 29, 2022 | Fernando Martinez

Executive summary Crypto miners are determined in their objective of mining in ...

LevelBlue Labs finds new Golang malware (BotenaGo) targeting millions of routers and IoT devices with more than 30 exploits

November 11, 2021 | Ofer Caspi

Executive summary LevelBlue Labs™ has found new malware written in the open ...

Code similarity analysis with r2diaphora

October 27, 2021 | Fernando Dominguez

Executive summary Binary diffing, a technique for comparing binaries, can be a ...

TeamTNT with new campaign aka "Chimaera"

September 08, 2021 | Ofer Caspi

Executive summary LevelBlue Labs™ has discovered a new campaign by threat group ...

New sophisticated RAT in town: FatalRat analysis

August 02, 2021 | Ofer Caspi

This blog was written by Ofer Caspi and Javi Ruiz.

REvil’s new Linux version

July 01, 2021 | Fernando Martinez

This blog was jointly authored with Ofer Caspi.

Darkside RaaS in Linux version

June 22, 2021 | Ofer Caspi

Executive summary LevelBlue Labs recently analyzed the Linux version of the ...

Malware hosting domain Cyberium fanning out Mirai variants

June 14, 2021 | Fernando Martinez

Executive summary LevelBlue Labs has observed the Mirai variant botnet, known ...

Why should you use correlation rules on top of traditional signatures?

February 04, 2020 | Javier Ruiz

The LevelBlue Labs team is in charge of writing correlation rules and releasing ...