Tag: inc

2 Attack Reports | 0 Vulnerabilities

Attack reports

Exposing Fox Tempest: A malware-signing service operation

Fox Tempest is a financially motivated threat actor operating a malware-signing-as-a-service (MSaaS) business used by cybercriminals to distribute malicious code, including ransomware. The actor abuses Microsoft Artifact Signing to generate fraudulent code-signing certificates, allowing malware to …

oyster backdoor

vanilla tempest

code-signing certificates

malware-signing-as-a-service

ransomware enabler

Published: May 19, 2026

Downloadable IOCs: 3

Shared secret: EDR killer in the kill chain

This intelligence report analyzes a sophisticated tool designed to disable endpoint security solutions, particularly EDR systems, on infected systems. The tool, known as AVKiller, has been observed in multiple ransomware attacks since 2022. It is heavily protected, targets various security vendors,…

Published: August 7, 2025

Downloadable IOCs: 56

Click here to see more Attack Reports