FortiGuard Labs Threat Research

FortiGuard Labs Threat Research

Deep Dive Into a Linux Rootkit Malware

An in-depth analysis of how a remote attacker deployed a rootkit and a user-space binary file by executing a shell script.

FortiGuard Labs Threat Research

Phish-free PayPal Phishing

An example of a recent phishing attempt and how to spot the obvious phishing tell-tales.

By Carl Windsor January 08, 2025

FortiGuard Labs Threat Research

Catching "EC2 Grouper"- no indicators required!

Get detailed tactics associated with EC2 Grouper and how Lacework FortiCNAPP can be leveraged to detect this threat.

By Chris Hall December 30, 2024

FortiGuard Labs Threat Research

Botnets Continue to Target Aging D-Link Vulnerabilities

FortiGuard Labs recently noticed that attackers still use and deliver two different botnets via D-Link exposing a HNAP interface weakness. Learn more.

By Vincent Li December 26, 2024

FortiGuard Labs Threat Research

Analyzing Malicious Intent in Python Code: A Case Study

In this FortiGuard analysis, we examine the Python scripts behind two malicious packages, outline their behaviors, and provide insights into their potential impact.

By Jenna Wang December 23, 2024

FortiGuard Labs Threat Research

Fortinet Contributes to Major Cybercrime Operation Arrests

Fortinet contributes to major INTERPOL and AFRIPOL cybercrime operations arrests of members of cybercrime groups operating across Africa. These individuals specialize in ransomware, digital extortion, online scams, and Business Email Compromise (BEC) attacks.

By Derek Manky December 03, 2024

FortiGuard Labs Threat Research

SmokeLoader Attack Targets Companies in Taiwan

FortiGuard Labs has uncovered an attack targeting companies in Taiwan with SmokeLoader, which performs its attack with plugins this time. Learn more.

By Pei Han Liao December 02, 2024

FortiGuard Labs Threat Research

Ransomware Roundup - Interlock

Interlock is a recent ransomware variant that has victimized organizations in the United States and Italy, but may have hit other countries. The ransomware affects not only Windows, but also the FreeBSD platform. Read more.

By Shunichi Imano and Fred Gutierrez November 29, 2024

FortiGuard Labs Threat Research

Advanced Cyberthreats Targeting Holiday Shoppers

Black Friday and Holiday Shopping Threats Targeting Shoppers on the Darknet. Learn more.

By FortiGuard Labs November 26, 2024

FortiGuard Labs Threat Research

Threat Predictions for 2025: Get Ready for Bigger, Bolder Attacks

From more sophisticated playbooks to a rise in cloud attacks, cybercriminals are upping the ante to execute more targeted and harmful activities. Learn more.

By Derek Manky November 21, 2024