ClickFix attacks are turning a routine habit — following instructions on a computer screen — into a way for cybercriminals to gain access to victim systems. A new report from CTM360, ClickFix & Beyond: Mapping the Expanding Family of User-Assisted Malware Delivery Techniques, examines how the social engineering technique has evolved from deceptive website prompts into a broader malware delivery…
The 2026 Winter Olympics in Italy are scheduled to start on February 6th. That is just weeks away. While the world prepares to watch the best athletes compete for gold in Milano Cortina, a different competition is already underway. Cybercriminals, nation-state hackers, and organised crime groups are positioning themselves to exploit the Games. And if you are planning to attend,…
Understanding the Threat Intelligence Lifecycle A key model for implementing and maintaining a robust threat intelligence program is the threat intelligence lifecycle—a continuous and iterative process with multiple stages. Depending on the source, these stages may vary slightly but typically encompass: Planning Collection Processing Analysis Dissemination Feedback Each stage presents its own challenges, but one is often overlooked—the feedback stage.…
The year 2024 was marked by an alarming increase in cyber attacks, our investigations identified a whopping 235 million victims and 1,055 companies reporting breaches. To put this into perspective, these numbers surpass the adult population of the United States. With an average of 222,660 victims per breach, the silent epidemic continues to reveal the fragility of our digital ecosystems.…
Endpoint Detection and Response (EDR) emerged as a response to the limitations of conventional antivirus solutions, primarily designed to address known threats. Gaining prominence in the early 2010s, EDR evolved as cyber threats became increasingly sophisticated and elusive. Initially, early EDR tools offered basic monitoring and alerting capabilities. However, these solutions rapidly advanced, incorporating sophisticated analytics and machine learning to…
Have you found yourself caught in the silent epidemic of cyber attacks? Ever wondered what happens when your data ends up in the wrong hands? Maybe you have received a notification that your passwords or privacy has been compromised and felt unsure about what to do next. Over the past six months, we’ve been researching, analysing, and reporting on these…
Cyber threats have advanced more than ever, making cyber threat hunting a crucial component of robust network, endpoint, and data security steps. Modern adversaries, external or internal, exhibit increasingly sophisticated methods that often elude traditional defence mechanisms. These advanced threats can infiltrate networks and remain undetected for extended periods, sometimes months, during which they may exfiltrate sensitive data, compromise confidential…
UPDATED: The 2024 Olympic Games in Paris (Paris 2024) outlines the expected challenges in securing digital infrastructure during the event, slated from July 26 to August 11, 2024, with the Paralympics following from August 28 to September 8, 2024. Drawing on insights from past Olympic games, this report evaluates potential threats across diverse areas, including crypto currencies, cyber threat actors,…
This cyber threat analysis for the 2024 Olympic Games in Paris (Paris 2024) outlines the expected challenges in securing digital infrastructure during the event, slated from July 26 to August 11, 2024, with the Paralympics following from August 28 to September 8, 2024. Drawing on insights from past Olympic games, this report evaluates potential threats across diverse areas, including crypto…
