Tag: graphite

3 Attack Reports | 0 Vulnerabilities

Attack reports

Virtue or Vice? A First Look at Paragon's Proliferating Spyware Operations

The report investigates Paragon Solutions, an Israeli spyware company founded in 2019 that sells a product called Graphite. Through infrastructure analysis, the researchers identified potential Paragon deployments in several countries. They also found evidence linking Paragon to the Canadian Ontari…

law enforcement

zero-click exploit

Published: March 19, 2025

Downloadable IOCs: 22

Cloud Cover: How Malicious Actors Are Leveraging Cloud Services

In recent times, there has been a notable rise in the exploitation of legitimate cloud services by threat actors, including nation-state groups. Attackers have realized the potential of these services to provide low-cost infrastructure, evading detection as communication to trusted platforms may no…

Published: August 7, 2024

Linked vulnerabilities : CVE-2024-21887, CVE-2024-21893

Downloadable IOCs: 20

Graph: Growing number of threats leveraging Microsoft API

An increasing number of cyber threats have adopted the use of the Microsoft Graph API to facilitate covert communications with command-and-control infrastructure hosted on Microsoft cloud services. This technique helps attackers blend in with legitimate traffic to cloud platforms and obtain infrast…

onedrivebirdyclient

Published: May 3, 2024

Downloadable IOCs: 10

Click here to see more Attack Reports