Threat Detection
On August 7, 2026, Fox News published an article with the sensational headline “Russian hackers can steal emails without a click.” It sounds like clickbait, but technically speaking, it’s hardly that. Because that’s exactly the point of the article.
LAUNDRY BEAR, a Russian, state-sponsored hacking group whose latest campaign doesn’t even require a click on a malicious link anymore. All they need is for you to open an email.
A call from the CEO requesting urgent payment approval. A video conference with familiar faces. A voice message from a colleague asking for quick assistance. For a long time, these very forms of communication were considered trustworthy. But with the advancement of generative AI, the reality of digital communication is changing fundamentally.
Ever faster and more sophisticated cyber attacks make a Security Operations Center (SOC) mandatory for every company. However, this is too much for most companies and they therefore start looking for an external partner. We explain what is important when choosing a provider and which criteria are important for small, medium-sized and large companies.
A free survival game called "PirateFi" on the Steam online game store has been distributing the information-stealing malware Vidar to unsuspecting players. Last week, Valve removed a game from its online store because users raised concerns about malware warnings from anti-virus software after launching the game.
After removing the game, the SECUINFRA Falcon team analyzed the malware and determined that the game was an attempt to trick players into installing an infodump called "Vidar". As the game advertisement contained references to cryptocurrencies and blockchain technology, we believe this was a lure specifically targeting players interested in these topics.
Cyber attacks often lead to unauthorized access to personal or confidential data. If the data is stolen from the organizational network in the process, it is referred to as a data leak or data exfiltration. The motives for data theft are diverse and range from industrial espionage and blackmail to resale or identity theft. Recently, there has also been a…
Monitoring the network infrastructure is an important addition to existing monitoring measures. It complements the information provided by a SIEM system.
The increasing complexity of development of new attack methods or variants of already known ones pose challenges for signature-based detection methods. Additional approaches are needed that are capable of supporting such a system where signatures and rules can no longer be used effectively.