Blog

Pricing

CYNET Security Foundations

Attack Techniques

Stay ahead of adversaries by understanding the latest attack techniques, tactics, and procedures used by cybercriminals targeting modern organizations.

Attack Techniques

Signed, Trusted, Weaponized: Inside the BYOVD Playbook Powering Modern Ransomware

How ransomware groups abuse signed vulnerable drivers to gain kernel access. Inside Cynet's investigation of Gentlemen ransomware and PoisonX.

Attack Techniques

What is Masquerading (T1036)? How Renamed Executables Evade Detection.

Cynet’s threat research report on MITRE ATT&CK T1036 (Masquerading), and how attackers rename malicious executables to evade detection.

Attack Techniques

Top 6 Cyber Attack Prevention Strategies in 2025

A cyber attack is a deliberate exploitation of computer systems, networks, or technology-enabled enterprises.

Attack Techniques

Quick Guide to MITRE ATT&CK: Matrices, Tactics, Techniques & More

The MITRE ATT&CK framework is a knowledge-based repository of adversary tactics and techniques based on real-world observations.

Attack Techniques

Linux Ransomware: Attack Anatomy, Examples, and Protection

If attackers can compromise your Linux server, they can access sensitive data and disrupt operations, causing downtime and financial losses.

Attack Techniques

What is Cyberwarfare?

Cyberwarfare is a series of cyber attacks against an enemy nation state. The goals of cyberwarfare include sabotage, espionage, economic warfare, and propaganda.

Attack Techniques

Defense Evasion Techniques – PEB Edition

Adversaries exploit the Process Environment Block to bypass user-mode detection tools effectively

Attack Techniques

Cyber Warfare – The Conflict Between Russia & Ukraine

Cynet CyOps is carrying out ongoing threat intelligence gathering and analysis efforts to protect Cynet customers. Russia & Ukraine conflict

Attack Techniques

Spring4shell Explained

On March 30, 2022, a security researcher published a proof-of-concept exploit code that targets a zero-day vulnerability in the Spring Core module of the Spring Framework, which led to an unauthenticated remote code execution (RCE).

Attack Techniques

Ransomware Detection: Common Signs and 3 Detection Techniques

Learn about the importance of early ransomware detection and the common ways to detect ransomware before it can do massive damage.

Attack Techniques

Network Security: Complete Guide to Threats and How to Defend Your Network

Understand the main threats facing corporate networks and advanced security models and technologies that can help you defend your network.

Attack Techniques

New Wave of Emotet – When Project X Turns Into Y

Cynet Orion Threat Research and Intelligence Team are closely tracking Emotet TTPs (tactics, techniques, and procedures) on a daily basis.

Attack Techniques

Key Malware Detection Techniques

Discover top malware detection techniques used in EPP and EDR to strengthen your defenses. Learn methods for identifying and blocking threats effectively.

Attack Techniques

RedLine is on track, Next stop – Your credentials

RedLine stealer harvests credentials and system data, targeting browsers and apps since early 2020

Attack Techniques

Anti-Forensics Techniques

In this article, we will cover various anti-forensic techniques that are based on file system, Windows Registry, and Windows event logs.

Attack Techniques

Threats Looming Over the Horizon

Based on several incident response investigations, Cynet has detected active exploitations of the Log4Shell vulnerability on VMware Horizon Servers by different threat actors who deployed Cobalt Strike beacons, Cryptominers, and fileless reverse shells.

Attack Techniques

Lateral Movement Techniques

Learn about lateral movement techniques and ways attackers are utilizing them to expand their hold over an environment and hop from one endpoint to another all the way to the domain controller.

Attack Techniques

WMI – The Stealthy Component

Read more about how attackers use Windows System processes to evade detection and succeed at infiltrating and attacking endpoints and networks

Attack Techniques

Log4Shell Explained

Learn more about the newest vulnerability that's impacting a wide range of software and servers that utilize a popular Java library

Attack Techniques

Defense Evasion Techniques

Learn more about some of the most common and dangerous defense evasion techniques used by malicious actors today, and how Cynet defends against them.

Attack Techniques

APT Security: Attack Stages, Recent Attacks, and 6 Ways to Secure Your Network

An advanced persistent threat (APT) is a systematic, sophisticated cyber attack. It is usually orchestrated by a group of hackers and runs for a long period of time.

Attack Techniques

Quakbot Strikes with QuakNightmare Exploitation

A new threat with a novel delivery method is creating serious problems for organizations. Learn more about Quakbot and how Cynet can help defend you from it.

Attack Techniques

A Virtual Baffle to Battle SquirrelWaffle

A new malware actor has emerged alongside Trickbot, Bazarloader, Ursnif, Dridix, and IcedID in email-based malware campaigns

Attack Techniques

Recent Microsoft Vulnerabilities Overview

In this article, we’ll break down several recent Microsoft vulnerabilities in an attempt to simplify them.

Attack Techniques

Microsoft MSHTML Remote Code Execution Vulnerability

Microsoft has identified a critical zero-day vulnerability, CVE-2021-40444, exploited via malicious ActiveX controls in Office documents.

Attack Techniques

Malware Evolution – Analyzing LockBit 2.0

LockBit ransomware's RaaS model fuels its rise as attackers use it for widespread company encryption.

Attack Techniques

How WMI, CMD.exe and LOLbins Enable Stealthy Attacks

Most people will remember 2020 as the year of COVID-19 and the shift to remote work, but beneath the surface there are other reasons for infamy.

Attack Techniques

CyOps Important Security Update – ProxyShell

ProxyShell exploits Microsoft Exchange vulnerabilities, enabling remote code execution by attackers

Attack Techniques

The Art of Persistence

Learn more about how attackers gain and maintain a foothold in your network by deploying persistance attacks, and how Cynet defends you against them.

Attack Techniques

CyOps Important Security Update: Campaign Targeting Italian Organizations & Entities

A Ursnif campaign targets Italian organizations, uncovered by the CyOps team’s threat intelligence efforts

Attack Techniques

Cynet Ransomware Report: Mespinoza

Mespinoza was first discovered in October 2019, but its first real large-scale campaign came a year later, in October 2020.

Attack Techniques

New Dell Vulnerability Detected

CyOps alerts organizations to emerging threats and vulnerabilities with actionable insights

Attack Techniques

Process Injection Techniques

In this article we will explore the three main process injection methods and analyze this technique in the wild.

Attack Techniques

CYNET VS. HAFNIUM

In this article we refer to how Cynet 360 detects the usage of these tools and protects customers against HAFNIUM-related attacks.

Attack Techniques

China Chopper Observed in Recent MS Exchange Server Attacks

China Chopper is a web shell backdoor enabling remote access to enterprise networks, exploiting client-side apps for control over compromised systems

Attack Techniques

Cyber Attacks: A Complete Guide to Types, Examples & Prevention (2026)

A comprehensive guide to cyber attacks — what they are, the most common types, real-world examples, and proven prevention strategies to protect your organization in 2025.

Attack Techniques

Here We Go Again – A New Emotet banking trojan Wave Observed by Cynet

Learn about the Emotet malware evolution over the years followed by discoveries in the recent Emotet wave observed by Cynet CyOps.

Attack Techniques

SUNBURST Backdoor C2 Communication Protocol

Get an in-depth understanding of the SUNBURST SolarWinds attack, detailed attack flow, and new research about the C2 protocol that made the attack successful.

Attack Techniques

When a Sunburst Turns Supernova – A Recent Solarigate Development

Investigations into the SolarWinds attack and SUNBURST backdoor reveal additional malware, highlighting the evolving nature of supply chain threats

Attack Techniques

Malware Anti-VM Techniques

In this article we will share with you how a malware author finds out if he is on a VM-based lab and how to overcome this hurdle with ease.

Attack Techniques

API Hooking – Tales from a Hacker’s Hook Book

API hooking is an integral part of the Windows operating system, has legitimate uses, and can be implemented in numerous ways. Therefore, complete mitigation and prevention are difficult to accomplish.

Attack Techniques

Zerologon Vulnerability: Analysis and Detection Tools

Zerologon targets Domain Controllers, enabling attackers to control hosts and servers, posing a critical risk to organizations' security

Attack Techniques

User Account Control – Overview and Exploitation

User Account Control, commonly abbreviated UAC, is a Windows security component introduced in Windows Vista and Windows Server 2008. UAC restricts processes’ access to admin-level (privileged) resources and operations as much as possible, unless they are explicitly granted by the user.

Attack Techniques

DLLs and Ways They Can Hurt Us

How Dynamic-Link Libraries (DLLs) and the way the Windows API is instructed to use them may be utilized as an interface for arbitrary code execution and assist malicious actors to achieve their goal.

Attack Techniques

Powershell Obfuscation Demystified Series Chapter 3: Gootkit

In this article we discuss a known obfuscation malware called Gootkit and perform a deep dive into the malicious PowerShell code.

Attack Techniques

What Are LOLBins and How Do Attackers Use Them in Fileless Attacks?

Living off the land (LOL) describes using trusted, pre-installed system tools for malware propagation

Attack Techniques

Threat Detection Report: Wastedlocker Ransomware

WastedLocker is a ransomware operated by a malware exploitation gang, commonly known as the ‘Evil Corp gang.’ The same gang that is associated with Dridex and BitPaymer.

Attack Techniques

Ransomware Attacks in Belgium – Analysis & Protection

The Cynet research team has conducted a thorough analysis of various samples from attacks and concluded that there is strong resemblance to both GlobeImposter and MedusaLocker ransomware attacks. The full analysis is available in the article.

Attack Techniques

Emotet vs Trump – Deep Dive Analysis of a Killer Info-Stealer

Emotet is a modular trojan that steals financial data, banking credentials, and Bitcoin wallets

Attack Techniques

THREAT REPORT – FTCODE

Cynet has detected a malicious PowerShell command. After analyzing the command, we have concluded that this command is associated with a known ransomware named FTCode.

Attack Techniques

NetWalker Ransomware Report

NetWalker ransomware encrypts files with the Mailto extension; its decryptor reveals its true identity

Attack Techniques

Cynet Detection Report: Ragnar Locker Ransomware

Ragnar Locker is a ransomware that runs on Microsoft Windows. It specifically targets software commonly used by managed service providers to prevent their attack from being detected and stopped.

Attack Techniques

Cynet Detection Report: Maze Ransomware

In late 2019, the hacker group TA-2101 had used Fallout and Spelevo exploit kits to distribute multiple malwares. The group used emails to target health care related environments around the US.

Attack Techniques

Threat Research Report: Clipbanker – 13 Second Attack

In this article, the Cynet Research team reveals a highly complex attack that runs for only 13 seconds by using several malwares and different tactics. From our analysis, the threat that we discovered within our investigation is name the “ClipBanker” trojan.

Attack Techniques

Powershell Obfuscation Demystified Series Chapter 2: Concatenation and Base64 Encoding

Fileless malware often leverages PowerShell for in-memory process execution, dominating initial attack steps

Attack Techniques

Powershell Obfuscation Demystified Series Chapter 1: Intro

In this series of blogs, we’ll deep dive into various Powershell obfuscation and de-obfuscation techniques. Our aim is to provide analysts and malware researchers with hands-on actionable knowledge to add to their toolbox.

Attack Techniques

nJRAT Report: Bladabindi

njRAT is a variant of jRAT, which is also called Bladabindi; it is a remote access trojan used to control infected machines remotely. Because of its availability and its techniques, njRAT is one of the most widely used RATs in the world – first detected in 2013.

Attack Techniques

Man-in-the-Browser Attacks

In this article, we’ll show one common technique adversaries use to collect user data and even manipulate it to their advantage.

Attack Techniques

How Hackers Use ICMP Tunneling to Own Your Network

This article touches on C&C Communication and Data Exfiltration. Having some form of control and exfiltration interface with targeted machines is a vital part of most cyber campaigns, and it may seem rather straightforward.

Attack Techniques

Office Macro Attacks

Macros are special-purpose programs used to automate procedures within a bigger application or software. Usually a macro consists of a series of commands and actions written in a dedicated Macro Language or a standard programming language.

Attack Techniques

How Hackers Use DNS Tunneling to Own Your Network

A firewall is no longer enough to separate an internal network and keep it safe, and DNS tunneling is just one of the creative techniques that cybercriminals use to escape internal networks.

Attack Techniques

LLMNR & NBT-NS Poisoning and Credential Access using Responder

We protect our customers from this attack by actively searching for instances of Responder on the network, as well as utilizing passive mitigation methods.

Attack Techniques

Attack Techniques – Cynet’s Hands-on Guides

Attack Techniques

What Is Cobalt Strike and How Does It Work?

Learn about Cobalt Strike, a powerful attack platform built for ethical hackers, but now used by thousands of threat actors to launch advanced attacks.

Attack Techniques

FTCode Ransomware: Distribution, Anatomy and Protection

Learn about FTCode, a pure PowerShell-based ransomware that executes without downloading any files, encrypts files and demands a ransom.

Attack Techniques

Network Attacks and Network Security Threats

A network attack aims to access a network without permission, either to steal or alter data. This differs from endpoint, malware, and software vulnerability attacks. Learn about passive vs. active network attacks and more.

Attack Techniques

Social Engineering Prevention

Learn what social engineering attacks are, including five examples of attacks, learn how you can avoid them and discover how Cynet can help you prevent them

Attack Techniques

Understanding Privilege Escalation and 5 Common Attack Techniques

Learn about privilege escalation, and discover windows privilege escalation techniques and see how to mitigate them. Also, see Linux privilege escalation.

Attack Techniques

Lateral movement: Challenges, APT, and Automation

This guide explains lateral movement, and how today this method is more widespread, as attackers employ automated tools and bots.

Let's get started!

Ready to extend visibility, threat detection and response?