APT41 / Wicked Panda: threat actor report
China-linked APT41 runs state espionage alongside financially motivated operations. The report covers the group's toolset, a PlugX analysis, case studies from aviation, …
Public sector
66 pages
IG-RPT · ARCHIVE
Threat reports
Sector reports published by our research team.
APT29 / Cozy Bear: threat actor report
APT29, attributed to Russia's Foreign Intelligence Service (SVR): its operations from SolarWinds to the earthquake-themed campaign against Türkiye, its techniques against cloud …
Public sector
95 pages
APT34 / Helix Kitten (OilRig): threat actor report
Campaigns by Iran-linked APT34 against energy, finance, telecom and government organisations in the Middle East; its PowerShell-based backdoors, DNS-based C2 and ready-to-use …
Banking & finance
55 pages
APT28 / Fancy Bear: threat actor report
APT28, linked to Russian military intelligence: its targets, four main intrusion paths, a toolset from X-Agent to Zebrocy, and per-malware IoCs with …
Public sector
63 pages
Newsletter