Right arrow
Person in a blurred motion is working on a computer with screen showing lines of code, emphasizing a dynamic and intense focus on software development or programming in a dimly lit room.
category iconThreat Research

DarkGate: Dancing the Samba With Alluring Excel Files
A laptop on a desk displaying a vibrant graphical interface with a circular red pattern, possibly representing cybersecurity or data analysis. The laptop is illuminated by the screen’s glow in a dimly lit room, which also shows a blurred background suggesting a secondary monitor and small desk objects.
category iconThreat Research

Dissecting GootLoader With Node.js
Abstract illustration of a network sppread like a spiderweb, connecting covering the globe and symbolizing data or communication links.
category iconHigh Profile Threats

Threat Brief: CVE-2024-6387 OpenSSH RegreSSHion Vulnerability

Access the latest threat research

View all research Right Arrow
A close-up view of a data center with racks of servers featuring glowing blue lights. The focus is on the intricate details of the server equipment illuminated by LED lights, highlighting the advanced technology and connectivity of modern data infrastructure.
category iconSecurity Technology

The Contrastive Credibility Propagation Algorithm in Action: Improving ML-powered Data Loss Prevention
Read now
The image depicts a close-up view of a circuit board featuring microchips and electronic components with bright red digital data streams emanating from the surface, symbolizing high-speed data processing and technology innovation.
category iconMalware

Attackers Exploiting Public Cobalt Strike Profiles
Read now
category iconCloud Cybersecurity Research

Attack Paths Into VMs in the Cloud
Read now

Understand high profile cyberthreats and vulnerabilities

View high profile threats Right Arrow
A digital illustration of a world map focused on Europe and parts of Asia, highlighted with glowing connections and nodes representing global connectivity.
category iconVulnerabilities

Threat Brief: Operation MidnightEclipse, Post-Exploitation Activity Related to CVE-2024-3400 (Updated May 20)
Read now
Futuristic illustration with glowing neon lights and advanced technology motifs, depicting cloud computing and data flow through interconnected networks. The scene is highlighted by hovering digital clouds and dynamic, illuminated linear structures, set in a dramatic, blue and orange color scheme.
category iconCloud Cybersecurity Research

Muddled Libra’s Evolution to the Cloud
Read now
Close-up side profile of a Black woman wearing glasses, focused intently on something out of frame.
category iconCloud Cybersecurity Research

Threat Brief: Vulnerability in XZ Utils Data Compression Library Impacting Multiple Linux Distributions (CVE-2024-3094)
Read now
A digital illustration of glowing blockchain links superimposed on a background of binary code, representing cybersecurity and digital transactions in the context of modern financial technologies.
category iconMalware

Threat Group Assessment: Muddled Libra (Updated)
Read now
Abstract illustration of a digital network connecting various points on a map of the United States, symbolizing data or communication links.
category iconVulnerabilities

Threat Brief: ConnectWise ScreenConnect Vulnerabilities (CVE-2024-1708 and CVE-2024-1709)
Read now
Abstract digital image displaying a blue background with a glowing, interconnected network of lines and dots forming a stylized world map. The design emphasizes global connectivity and technology.
category iconNation-State Cyberattacks

Threat Brief: Attacks on Critical Infrastructure Attributed to Insidious Taurus (Volt Typhoon)
Read now

Watch, listen and learn about cybersecurity topics

View All Right Arrow

Follow the activities of threat actor groups tracked by Unit 42

All threat actor posts Right Arrow
A digital image depicting a skull formed by binary code, composed of ones and zeros, in shades of blue against a black background. The binary numbers appear to float and overlay each other, creating a visually striking and thematic technological motif.
category iconMalware

Operation Diplomatic Specter: An Active Chinese Cyberespionage Campaign Leverages Rare Tool Set to Target Governmental Entities in the Middle East, Africa and Asia
Read now
Futuristic illustration with glowing neon lights and advanced technology motifs, depicting cloud computing and data flow through interconnected networks. The scene is highlighted by hovering digital clouds and dynamic, illuminated linear structures, set in a dramatic, blue and orange color scheme.
category iconCloud Cybersecurity Research

Muddled Libra’s Evolution to the Cloud
Read now
Digital security concept with a visual depiction of a lock icon and various cybersecurity-related words such as "password," "attack" and "danger" illuminated in a blue digital interface that includes a world map.
category iconNation-State Cyberattacks

ASEAN Entities in the Spotlight: Chinese APT Group Targeting
Read now
category iconNation-State Cyberattacks

Curious Serpens’ FalseFont Backdoor: Technical Analysis, Detection and Prevention
Read now
A digital illustration of glowing blockchain links superimposed on a background of binary code, representing cybersecurity and digital transactions in the context of modern financial technologies.
category iconMalware

Threat Group Assessment: Muddled Libra (Updated)
Read now
A stylized portrayal of APT Fighting Ursa. The marks from bear claws in bright orange against the backdrop of a night sky.
category iconVulnerabilities

Fighting Ursa Aka APT28: Illuminating a Covert Campaign
Read now

Explore in-depth cybersecurity trend reports

View All Right Arrow
Report

2024 Unit 42 Incident Response Report

Download our annual survey of incident data from more than 250 organizations and 600 incidents to better understand the threats you face, including:

Initial access

  • Exploiting software vulnerabilities accounted for 38.60% of the initial access points in 2023, up from 28.20% in 2022.

Data theft tactics

  • In 93% of incidents Unit 42 responded to, threat actors took data indiscriminately rather than searching for specific data, which is up from 81% of cases in 2022 and 67% in 2021.
Get the report
Cover of the 2024 Unit 42 Incident Response Report
category iconCloud Cybersecurity Research

Attack Paths Into VMs in the Cloud
Read now
Zoomed in Unit 42 logo.
category iconCybercrime

2024 Unit 42 Incident Response Report: Navigating the Shift in Cybersecurity Threat Tactics
Read now
A computer screen displaying a digital padlock symbol on a graphical interface, indicative of cybersecurity, with a keyboard and mouse in the foreground, illuminated by ambient blue and red lighting.
category iconRansomware

Ransomware Retrospective 2024: Unit 42 Leak Site Analysis
Read now
A dynamic visual of computer code projected over a blurred keyboard, emphasizing vibrant pink and blue digital effects. The code includes various elements like 'class', 'id', 'div', and HTML tags, reflecting a programming environment.
category iconMalware

From DarkGate to AsyncRAT: Malware Detected and Shared As Unit 42 Timely Threat Intelligence
Read now

Default Heading

Read the article Right Arrow