May 29, 2026

The Gentlemen ransomware: Dissecting a self-propagating Go encryptor

In this article Pre-encryption File encryption Post-encryption Defending against The Gentlemen ransomware Microsoft Defender detections and hunting guidance Indicators of compromise Ransomware that combines robust encryption […]
April 10, 2026

Investigating Storm-2755: “Payroll pirate” attacks targeting Canadian employees

In this article Storm-2755’s attack chain Defending against Storm-2755 and AiTM campaigns Microsoft Defender detection and hunting guidance Indicators of compromise Microsoft Incident Response – Detection […]
March 13, 2026

Storm-2561 uses SEO poisoning to distribute fake VPN clients for credential theft

In this article From search to stolen credentials: Storm-2561 attack chain Defending against credential theft campaigns Microsoft Defender detection and hunting guidance Indicators of compromise In […]