Security Intelligence
Unsecured lines: Analyzing China’s cyberattack on U.S. telecoms
Field Effect analyzes the recent Chinese state-sponsored cyber actors' breach of U.S. telecoms and its national...
Security Intelligence
Unmasking Braodo: Inside the operations of a relentless info stealer
Field Effect security intelligence analysts provide insight into the features of the Braodo info stealer.
Security Intelligence
Field Effect discovers M365 adversary-in-the-middle campaign
Field Effect security intelligence analysts uncover an adversary-in-the-middle campaign that leverages Axios to target...
Security Intelligence
Sample templates abused in recent Gootloader campaign
Field Effect security intelligence analysts uncover new details of Gootloader SEO attacks including new infrastructure.
Security Intelligence
Application consent attacks: Patterns, detection, and mitigation
Field Effect has seen a surge in application consent attacks in the first quarter of 2024. Here's what that means and...
Security Intelligence
One-day, n-day, and zero-day vulnerabilities explained
Field Effect explains the difference between zero-day and one-day vulnerabilities, and how to prevent them from being...
Security Intelligence
4 lessons MSPs can learn from the ScreenConnect vulnerabilities
Discover what we learned from analyzing the ScreenConnect vulnerabilities, and how MSPs can use this information to...
Security Intelligence
Hackers observed abusing open redirect scripts in recent phishing campaign
Field Effect has detected a limited and brief phishing campaign that takes advantage of misconfigurations in...
Security Intelligence
Melting an IcedID sponsored Google ad for trojanized Webex download file
Field Effect security intelligence analysts were recently alerted to an incident in which IcedID malware was detected...
Security Intelligence
New Fortinet vulnerability allows RCE without authentication
Learn about a CVE-2023-27997 which affects Fortinet devices with SSL-VPN components, and can allow remote code...
Security Intelligence
MOVEit Transfer zero-day vulnerability: A golden opportunity for threat actors
Take a deep dive into the MoveIT Transfer zero-day vulnerability with Field Effect's analysts, and learn more about...
Security Intelligence
What you should know about the new .zip and .mov TLDs
Several new TLDs have become available, two (.zip and .mov) introduce additional risk.