๊ณ ์ ๋ ํธ์
Day 1 at #RSAC 2026 and PolySwarm is on the ground in San Francisco. Weโre meeting with teams tackling todayโs evolving threat landscape. If youโre here this week, letโs connect.
polyswarm.io/rsa-2026
English
PolySwarm ๐บ๐ธ
3K posts
PolySwarm ๐บ๐ธ
@PolySwarm
A threat intelligence & detection community helping security teams detect new & emerging malware. Ticker: $NCT Join our Discord: https://t.co/AVknm1YZjh
San Diego, CA ๊ฐ์
์ผ Aฤustos 2017
1.4K ํ๋ก์13.8K ํ๋ก์
Great energy at #RSAC this week โก
Awesome connecting with builders, defenders, and innovators pushing cybersecurity forward. The conversations around threat intel and collaboration have been ๐ฅ
If youโre here, come find us and say hi ๐
#CyberSecurity #ThreatIntel #PolySwarm
English
CL-STA-1087, a long-running #espionage campaign, is targeting Southeast Asian military orgs with custom backdoors and credential harvesting. @Unit42_Intel reported on this activity. See our analysis + related samples:
blog.polyswarm.io/china-linked-eโฆ
English
PolySwarm ๐บ๐ธ ๋ฆฌํธ์ํจ
RSAC opens its annual flagship event today in San Francisco at the Moscone Center. RSAC Conference convenes the worldโs top cybersecurity, govt., and business leaders to learn, explore current and future trends to create a safer society. spr.ly/6010B6Z0wa
English
Recent #Iran developments suggest states with degraded #cyber capabilities may choose to pivot. #Cuba presents a similar flashpoint, leveraging geography to monitor telecom, maritime, and military comms despite limited offensive cyber power.
blog.polyswarm.io/threat-spotligโฆ
English
PolySwarm ๐บ๐ธ ๋ฆฌํธ์ํจ
๐จ NEW: Bitrefill reveals it was hit by a cyberattack on March 1 linked to Lazarus Group, with attackers draining crypto wallets and accessing 18,500 purchase records.
English
Iranian #cyber actors are expanding operations targeting U.S. organizations while exploiting internet-connected cameras across the #MiddleEast for intelligence and battlefield awareness. Another layer in #Iranโs hybrid #warfare strategy. Read more:
blog.polyswarm.io/footholds-liveโฆ
English
Recent maritime navigation anomalies in the Persian Gulf and Strait of #Hormuz suggest the use of GNSS #spoofing and other electronic #warfare techniques disrupting vessel positioning systems and AIS tracking data. Check out our blog for more info.
blog.polyswarm.io/electronic-warโฆ
English
#Iranian drone strikes damaging multiple Amazon Web Services (#AWS) data centers in the United Arab Emirates & Bahrain demonstrate how modern conflicts increasingly target digital #infrastructure that underpins global computing.
blog.polyswarm.io/hybrid-warfareโฆ
English
Our latest Threat Bulletin continues coverage of the ongoing hostilities involving Iran, examining the evolving #ThreatIntelligence landscape across #CyberSecurity, #Geopolitics, and regional #RiskIntelligence in the #MiddleEast.
blog.polyswarm.io/cyber-strategyโฆ
English
#PromptSpy is the first documented Android #malware to integrate generative AI, specifically @Google's Gemini, into its execution flow for dynamic, context-aware persistence. @ESET recently reported on it. Read our blog for more info & related samples.
blog.polyswarm.io/promptspy-andrโฆ
English
#Threatactors conducted a widespread supply chain poisoning operation, named #ClawHavoc. Koi recently reported on this activity. Check out our blog for more info and #PolySwarmโs related samples.
blog.polyswarm.io/the-clawhavoc-โฆ
English
#Massiv is an emerging #Android banking #Trojan family capable of enabling credential theft, message interception, and full device takeover. @ThreatFabric recently reported on it. Details + related samples on our blog:
blog.polyswarm.io/massiv-androidโฆ
English
A targeted intrusion into a #FinTech entity in the #cryptocurrency sector was attributed to #UNC1069, a North Korea-nexus financially motivated threat actor. @Mandiant recently reported on this activity. Check out our blog for more info & related samples.
blog.polyswarm.io/unc1069-uses-nโฆ
English
English
Operation #Neusploit is linked to #FancyBear exploiting #ZeroDay CVE-2026-21509 in Microsoft RTF files to deploy MiniDoor and Covenant Grunt implants targeting Central & Eastern Europe. @Zscaler recently reported on the activity. Our analysis ๐
blog.polyswarm.io/fancy-bear-levโฆ
English
#LabyrinthChollima has split into three distinct entities since 2018: Golden & Pressure Chollima (#CryptoTheft) & a core espionage group.
@CrowdStrike recently reported on the shared #Malware frameworks & how they reflect #DPRK cyber operations.
blog.polyswarm.io/labyrinth-cholโฆ
English
Researchers have identified #PeckBirdy, a versatile JScript-based #C2 framework, deployed since 2023 in campaigns linked to China-aligned #APT actors. @trendaisecurity recently reported on it. Check out our blog for more info & PolySwarm samples.
blog.polyswarm.io/china-nexus-thโฆ
English
A new #ransomware family, #Osiris, emerged in Nov 2025, targeting a major food service operator in SE Asia. @symantec and Carbon Black recently reported on Osiris. Check out our blog for more info and PolySwarmโs related samples.
blog.polyswarm.io/osiris-ransomwโฆ
English
Speed matters in incident response.
PolySwarm supports rapid triage so analysts can focus on what is real.
#IncidentResponse #SOC #InfoSec
English