Category: Threat Intelligence

SARS tax refund phishing: tracing a global phishing kit

Threat researchFollowing the refund: how fake South African government sites led to

What Indicators Miss: Geo-Aware Malware and Two Hidden Backdoors

// VMRAY LABS · THREAT RESEARCH What indicators miss: geo-aware malware and

2026-09-01

Pivoting in MISP: From Individual Indicators to Broader Threat Context

In the first post, we set up VMRay UniqueSignal as a feed

Deleting the Defenders: A Commodity BYOVD Toolkit That Erases Host Safeguards

Threat Intelligence Spotlight Executive Summary VMRay Labs has analyzed a family of

2026-08-10

Every agent needs an oracle: How to trust AI-drafted detection rules

Every Agent Needs an Oracle 01 Abstract Detection rules are increasingly drafted

2026-07-21

STIX and TAXII Explained: Threat Intelligence That Survives Ingestion

STIX and TAXII solve an important problem: moving cyber threat intelligence between

2026-07-21

The Operational Guide to IOC Quality

Security teams do not have an IOC shortage. They have an IOC

Execution-Level Analysis of a Russian-Speaking Multi-Operator Intrusion Campaign: Operation STANDOFF

Executive Summary VMRay Labs identified a previously unattributed, actively operated cybercriminal campaign

2026-07-06

Generating Precise Intelligence from Your & Phishing Malware Alerts

TL;DR / Fast Answer Generic threat intelligence feeds often lack the specific

Uncover the truth of Cybersecurity, one story at a time

Keep up to date with our weekly digest of articles. Get the latest news, invites to events, and threat alerts!

Subscribe to our Newsletter