This is the story of a hunt: how a pile of 276
2 decision types: message vs. threat 4 foundations of effective phishing
// VMRAY LABS · THREAT RESEARCH What indicators miss: geo-aware malware and
The Labs team at VMRay actively gathers publicly available data to identify
In the first post, we set up VMRay UniqueSignal as a feed
Threat Intelligence Spotlight Executive Summary VMRay Labs has analyzed a family of
Every Agent Needs an Oracle 01 Abstract Detection rules are increasingly drafted
The Labs team at VMRay actively gathers publicly available data to identify
9 malware analysis platforms and services compared 6 layers of trust in
STIX and TAXII solve an important problem: moving cyber threat intelligence between
Security teams do not have an IOC shortage. They have an IOC
Executive Summary VMRay Labs identified a previously unattributed, actively operated cybercriminal campaign
The Labs team at VMRay actively gathers publicly available data to identify
TL;DR / Fast Answer Incident Response (IR) and Detection Engineering (DE) are
TL;DR / Fast Answer Reliance on a single security control is a
TL;DR / Fast Answer Generic threat intelligence feeds often lack the specific
TL;DR / Fast Answer Effective Cyber Threat Intelligence (CTI) is more than
TL;DR / Fast Answer Not all data found during malware analysis is
Introduction Since the release of VMRay Platform 2026.2, we’ve had a busy
2standards working together: STIX and TAXII 4core building blocks that make up
Introduction Most threat intelligence work begins with a feed. Platforms like VMRay
Operationalizing VMRay UniqueSignal in MISP for detection, hunting and blocking In the
Integrating UniqueSignal with OpenCTI Using STIX/TAXII 2.1 OpenCTI is one of the
The Labs team at VMRay actively gathers publicly available data to identify
TL;DR / Fast Answer The cybersecurity landscape is a constant tug-of-war between
TL;DR / Fast Answer Generic threat feeds often fail to provide the
What a blocked alert in Microsoft Defender or Sentinel can still teach
The Labs team at VMRay actively gathers publicly available data to identify
Background “EtherHiding” is a technique that we keep seeing with increased popularity
The era of the single malicious link is fading. Today’s phishing attacks
Keep up to date with our weekly digest of articles. Get the latest news, invites to events, and threat alerts!
