rundll32.exe

• Ransomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat Landscape

  Ransomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat Landscape Written by: Bavi Sadayappan, Zach Riddle, Ioana Teaca, Kimberly Goody, Genevieve Stark Introduction Since 2018, when many financially motivated threat actors began shifting their moneti

• When prompts become shells: RCE vulnerabilities in AI agent frameworks

  When prompts become shells: RCE vulnerabilities in AI agent frameworks New research exposes how prompt injection in AI agent frameworks can lead to remote code execution. Learn how these vulnerabilities work, what’s impacted, and how to secure your agents. The post When prompts

• DFIR Report – The Gentlemen & SystemBC: A Sneak Peek Behind the Proxy

  DFIR Report – The Gentlemen & SystemBC: A Sneak Peek Behind the Proxy Key Points The Gentlemen RaaS The Gentlemen ransomware‑as‑a‑service (RaaS) operation is a relatively new group that emerged around mid‑2025. The operators advertise their services across multiple underground f

• “Handala Hack” – Unveiling Group’s Modus Operandi

  “Handala Hack” – Unveiling Group’s Modus Operandi Key Findings Introduction Handala Hack, also tracked by Check Point Research as Void Manticore, is an Iranian threat actor that is known for multiple destructive wiping attacks combined with “hack and leak” operations. The threat

• StealC and Amadey: Breaking down infostealers and the cybercrime services that deliver them

  StealC and Amadey: Breaking down infostealers and the cybercrime services that deliver them On June 24, 2026, Microsoft’s Digital Crimes Unit (DCU) facilitated the takedown, suspension, and blocking of domains that formed the backbone of the StealC and Amadey infrastructure. Thi

• FrostyNeighbor: Fresh mischief and digital shenanigans

  FrostyNeighbor: Fresh mischief and digital shenanigans ESET researchers uncovered new activities attributed to FrostyNeighbor, updating its compromise chain to support the group’s continual cyberespionage operations FrostyNeighbor: Fresh mischief and digital shenanigans Award-w

All reports →

• Connector · intel_report_ingest17