Darktrace researchers investigate CikaBika Bot, a Rust-based remote access trojan delivered through a document-themed lure. The malware uses a Nim loader, PowerShell UAC bypass and DLL search-order ...
Darktrace, a global leader in behavioral security, today announced three appointments to its Executive Leadership Team: Adam Towns as Chief Financial and Operating Officer (CFOO), Mike McGuinness as ...
Connect one-to-one with a Darktrace Subject Matter Expert during re:Invent week to discuss your current security priorities and learn how Darktrace can help you secure your AI agents. Our leaders will ...
MITRE ATT&CK has 191 techniques. Here's how Darktrace helps support detection across the full attack killchain Detailed mapping of Darktrace AI detection capabilities to MITRE ATT&CK techniques, ...
Darktrace analysis reveals ZionSiphon, an OT‑focused malware targeting Israeli water treatment and desalination systems. The malware combines privilege escalation, persistence, USB propagation, and ...
Learn about a recent Scattered Spider attack observed by Darktrace, comparing tactics with those seen in previous attacks. Widespread use of LOTL techniques alongside continued changes in TTPs such as ...
Darktrace investigated “PumaBot,” a Go-based Linux botnet targeting IoT devices. It avoids internet-wide scanning, instead using a C2 server to get targets and brute-force SSH credentials. Once inside ...
Atomic Stealer is rapidly emerging as a significant macOS threat, using infostealing and backdoor capabilities to target Apple users worldwide. Darktrace observed campaigns in 24 countries, detecting ...
This blog breaks down how Darktrace detected and analyzed Qilin, a Ransomware-as-a-Service group behind recent high-impact attacks. You’ll see how Qilin affiliates customize attacks with flexible ...
Docker is a prime target for malware, with new strains emerging daily. This blog explores a novel campaign showcasing advanced obfuscation and cryptojacking techniques. Out of all the services ...
Discover the rise of the Lumma info stealer and its implications for cybersecurity. Learn how this malware targets sensitive information. Darktrace cyber analysts are world-class experts in threat ...
Darktrace researchers identified a Twill Typhoon–linked China‑nexus campaign targeting APJ customers. The activity observed includes CDN impersonation, legitimate binaries, and DLL sideloading to ...