FortiGuard Labs recently discovered a threat actor leveraging ProxyShell exploits using unreported techniques. Learn about the malicious DLLs in memory by recreating incidents in a lab environment.
FortiGuardLabs discovered new phishing email campaigns, which use an Excel attachment to attempt to trigger the download of a new variant of Dridex malware. Learn how it runs and what sensitive information it collects.
FortiGuard Labs takes a look into Microsoft MSHTML remote code execution vulnerability. Learn how the attack works and the Fortinet product protections in place to address this vulnerability.
Fortinet's FortiGuard Labs 2021 mid-year Global Threat Landscape Report provides valuable takeaways about the cyberthreat landscape and ransomware. Read more.
FortiGuard Labs takes a detailed look into recently leaked documentation provided to criminal affiliates of Ransomware-as-a-Service outfit - Conti, including support provided by this group. Learn about the operations and tradecraft of Conti.
The FortiGuard Labs team discovered a malicious spam campaign using a social engineering lure to trick targets into opening a malicious Excel document which then contacts a remote server that downloads a malicious payload. Learn more in our analysis of the attack and infrastructure used.
The FortiGuard Labs team recently discovered a new phishing campaign with a fresh malware delivered by a Word document which is designed to steal crypto wallet information and credentials from victims’ infected devices. Learn more in our analysis.
FortiGuard Labs examines the ransomware used in the recent Kaseya attack and seeing what happens when a machine is infected by this ransomware by looking at some of the visible Indicators of Compromise. Learn more.