CYFIRMA Research

#Singapore’s position as a global financial, technological, and connectivity hub continues to attract sophisticated #cyberthreats from both #statesponsoredactors and financially motivated #cybercriminal groups. Sectors at Highest Risk include #Telecommunications, #FinancialServices, #Healthcare, #ITServices, #Semiconductor & #Technology, & #Manufacturing. #CyberSecurity #ThreatIntelligence #APT #Ransomware #DarkWeb #CyberDefense #CYFIRMA cyfirma.com/research/singa…

A sophisticated #phishing campaign is actively targeting #finance and procurement teams using invoice, payment, and operational lures, timed strategically around financial year-end activities. With increased transaction volumes and audit processes, employees are more likely to engage with seemingly routine emails, making this campaign particularly effective. It reflects a broader shift toward stealthy, user-driven phishing techniques designed to bypass traditional defenses. #CyberSecurity #ThreatIntelligence #BEC #CYFIRMA #ETLM" target="_blank" rel="nofollow noopener">cyfirma.com/research/invoi…

Stay informed with #CYFIRMA’s February 2026 #RansomwareThreat Report. February continued to reflect a high-activity #ransomware environment. #Qilin sustained consistent activity levels. Geographically, the #UnitedStates remained the most affected region, followed by #Canada, and the #UnitedKingdom. Industry targeting remained focused on #professionalservices, #manufacturing, & #informationtechnology. #CyberSecurity #ThreatIntel #ThreatLandscape #ETLM" target="_blank" rel="nofollow noopener">cyfirma.com/research/track…

In the past 90 days, the #InformationTechnology Industry faced high risks. 60% of observed #APTcampaigns hit #IT. #China-linked actors are dominant. It ranked first in #cyberIncidents across all industries. #RCE #vulnerabilities more than doubled. 205 #ransomware victims were observed. #CYFIRMA #CyberSecurity #ThreatIntelligence cyfirma.com/research/infor…

#CYFIRMAResearch presents another Fortnightly #VulnerabilitySummary! Get the latest insights on Fortnightly #vulnerabilities, severity levels, industry-specific threats, current trends, and much more. #CyberSecurity #Threatintel #CYFIRMA cyfirma.com/research/fortn…

#CYFIRMAResearch has identified critical security insights related to #CVE202624423, a high-severity unauthenticated #remotecodeexecution #vulnerability impacting #SmarterToolsSmarterMail. It allows attackers to execute arbitrary commands through the ConnectToHub API, potentially leading to full system compromise. #CYFIRMA #CyberSecurity #ThreatIntelligence #VulnerabilityResearch cyfirma.com/research/cve-2…

The #CYFIRMAResearch team is thrilled to share insights on #APT #EarthLusca. Stay ahead with insights on APT Earth Lusca's motives, targeted industries, targeted countries, & TTPs. #CyberSecurity #CYFIRMA #ETLM #threatintelligence cyfirma.com/research/apt-p…

In the past 90 days, the #TelecommunicationsandMedia Industry faced high risk across all monitored categories, except for #Ransomware. #APT targeting increased significantly, driven largely by #China-linked actors. #Underground & #DarkWeb Chatter remained among the highest across industries. The sector recorded one of the highest #CVE volumes, with major increases in #RCE, #DoS, & #injectionflaws. cyfirma.com/research/telec…

New Malware Research: Operation #FalseSiren. #CYFIRMAResearch has uncovered a targeted #Android #spyware campaign exploiting #wartime urgency by weaponizing the trusted #Israeli civil defense alert application. In this operation, threat actors distributed a trojanized version of the missile warning app via SMS #phishing (#smishing) campaigns, convincing victims to install what appeared to be a critical alert system update. Once installed, the application deployed a two-stage #malware framework designed to silently establish long-term surveillance on compromised devices. #CYFIRMA #ThreatIntelligence #AndroidMalware #MobileSecurity #ThreatResearch #MalwareAnalysis #CyberSecurity #CTI #AndroidSpyware cyfirma.com/research/opera…

#CYFIRMAResearch has uncovered a highly sophisticated #Android #Banking #Trojan with integrated #RemoteAccessTrojan (#RAT) capabilities targeting #Russian users and financial institutions, such as #bankingapps, #cryptocurrency applications, #government services apps & marketplace platforms. #ThreatIntelligence #Malware #BankingTrojan #CyberSecurity #MobileThreats #MalwareAnalysis #CYFIRMA cyfirma.com/research/taxis…

In the past 90 days, the #MaterialsIndustry faced nearly tripled quarter-over-quarter #APT targeting , with 47% of observed campaigns impacting it. #China-linked actors dominate. #Ransomware Victim counts remained elevated with broad gang participation and expanding geographic spread to 42 countries. #CYFIRMA #CyberSecurity #ThreatIntelligence #Qilin cyfirma.com/research/mater…

#CYFIRMAResearch presents another Fortnightly #Vulnerability Summary! Get the latest insights on Fortnightly vulnerabilities, severity levels, industry-specific threats, current trends, & much more. #CYFIRMA #CyberSecurity #Threatintel cyfirma.com/research/fortn…

Stay ahead with #CYFIRMA’s #Philippines Evolving #CyberThreat Landscape 2025–2026 Report. The Philippines is facing a sharp escalation in #AI-driven and automated cyber threats. Q3 2025 recorded over 52 million exposed credentials, while #ransomware operations increasingly targeted operational systems across healthcare, BFSI, and critical infrastructure. Identity compromise, vendor access abuse, and supply-chain pathways are now primary intrusion vectors. Geopolitical tensions are further amplifying state-linked #APT activity focused on persistence and pre-positioning inside sensitive networks. #CyberSecurity #ThreatIntel #DigitalRisk cyfirma.com/research/phili…

The #Telegram ecosystem. #Ransomware groups, Initial Access Brokers, #malware operators & leak channels are converging on a single platform for coordination, recruitment, validation, & amplification. This isn’t a migration from darknet forums, it’s an operational upgrade. #CyberSecurity #ThreatIntelligence #CYFIRMA cyfirma.com/research/teleg…

In the past 90 days, the #ManufacturingIndustry faced extensive #APT targeting, with 86% of observed #campaigns impacting the sector, driven primarily by #China-linked actors. It remained the second-most targeted sector by #Ransomware. #Qilin led in total cases. #CYFIRMA #CYFIRMA #CyberSecurity #ManufacturingIndustry #ThreatIntelligence #Germany #Canada #Italy #Taiwan cyfirma.com/research/manuf…

#SaudiArabia’s digital ecosystem is facing a convergence of escalating #cyberrisks. This report provides strategic insights, sectoral risk analysis, #ransomware trends, #darkweb monitoring findings, & forward-looking threat assessments into 2026. #ThreatIntelligence #APT #Phishing #ThreatLandscape #CyberSecurity #CYFIRMA cyfirma.com/research/conve…

Emerging Threat Model: #Python-Based #CredentialStealer (#CharlieKirkGrabber). Recent analysis highlights the continued growth of this modular, builder-driven #malware targeting #Windows environments. The sample demonstrates how commodity stealers are evolving to combine credential harvesting, system profiling, & cloud-based exfiltration using legitimate services and scripting frameworks. #ThreatIntelligence #CyberSecurity #CYFIRMA cyfirma.com/research/charl…

#CYFIRMAResearch just kicked off another Fortnightly Vulnerability Summary! Get the latest insights on Fortnightly #vulnerabilities, severity levels, industry-specific threats, current trends, & much more. #CyberSecurity #VulnerabilitySummary #CYFIRMA cyfirma.com/research/fortn…

In the past 90 days, the #AutomotiveIndustry faced increased #APT exposure, with over half of observed campaigns impacting it, driven largely by #China-linked actors & #Russian cybercrime. #Ransomware Victims rose sharply. Geographic spread widened, with notable increases in the #US, #Germany & #Romania. #CYFIRMA cyfirma.com/research/autom…

#Malware Spotlight: #LTXStealer #CYFIRMAresearch uncovered a sophisticated #Windows #infostealer hidden in a legit Inno Setup installer. Modern attackers are using trusted installers + runtime decryption to evade detection. #CyberSecurity #MalwareAnalysis #Infostealer #NodeJS #ThreatIntel #MaaS #CYFIRMA cyfirma.com/research/ltx-s…