Darktrace Analysis: Inside the SOC

Lifting the Fog: Darktrace’s Investigation into Fog Ransomware

Decrypting the Matrix: How Darktrace Uncovered a KOK08 Ransomware Attack

Christina Kreza

Phishing and Persistence: Darktrace’s Role in Defending Against a Sophisticated Account Takeover

In a recent incident, Darktrace uncovered a M365 account takeover attempt targeting a company in the manufacturing industry. The attacker executed a sophisticated phishing attack, gaining access through the organization’s SaaS platform. This allowed the threat actor to create a new inbox rule, potentially setting the stage for future compromises.

Continue reading

Bytesize Security

Don’t Take the Bait: How Darktrace Keeps Microsoft Teams Phishing Attacks at Bay

Get The Drop On Phishing Attacks Abusing Dropbox

How an Insider Exfiltrated Corporate Data to Google Cloud

How Darktrace AI Isn't Fooled by Impersonation Tactics

On the Case: Incident Analysis

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Campaign Trail: Threat Research

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Tech Talk: Maximising Integrations

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Industry Insights: Systemic Change

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Incidident analyis

Darktrace’s Detection of a Large-Scale Account Hijack that Led to a Phishing Attack

February 11, 2023

by Mariana Pereira

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

Phishing and Persistence: Darktrace’s Role in Defending Against a Sophisticated Account Takeover

Lifting the Fog: Darktrace’s Investigation into Fog Ransomware

Decrypting the Matrix: How Darktrace Uncovered a KOK08 Ransomware Attack

Christina Kreza

A Busy Agenda: Darktrace’s Detection of Qilin Ransomware-as-a-Service Operator

Alexandra Sentenac

Uncovering the Sysrv-Hello Crypto-Jacking Bonet

Prevent Data Exfiltration & Know When to Respond

Anna Gilbertson

Strategies to Prolong Quantum Ransomware Attacks

Industry Insights

Exploring AI Threats: Package Hallucination Attacks

Charlotte Thompson

Industry Insights

Explore Internet-Facing System Vulnerabilities

Revealing ViperSoftX Intrusion: Detecting Malware

Information-Stealing Malware Malvertises on Google

Roberto Martinez

Detecting and Responding to Vendor Email Compromises (VEC)

Self-Learning AI for Zero-Day and N-Day Attack Defense

Threat Hunting Life Cycle: Data Collection to Documentation

Darktrace’s Detection of a Hive Ransomware-as-Service

Emily Megan Lim

How Darktrace Could Have Stopped a Surprise DDoS Incident

Industry Insights

Cyber Tactics in the Russo-Ukrainian Conflict

Industry Insights

Post-Exploitation Activities of Ivanti CS/PS Appliances

Industry Insights

How Compliance Breach Mitigation Can Prevent Compromise

Rachel Resnekov

The Rise of the Lumma Info-Stealer | Malware-as-a-Service

Emily Megan Lim

Detection of an Evasive Credential Harvester | IPFS Phishing

The Price of Admission: Countering Stolen Credentials with Darktrace

Charlotte Thompson

[Part 1] Analysis of a Raccoon Stealer v1 Infection

Darktrace Threat Research Investigates Raspberry Robin Worm

Alexandra Sentenac

Stemming the Citrix Bleed Vulnerability with Darktrace’s ActiveAI Security Platform

What are Botnets and How Darktrace Uncovers Them

Detecting Malicious Email Activity & AI Impersonating

Isabelle Cheong

Sliver C2: How Darktrace Provided a Sliver of Hope in the Face of an Emerging C2 Framework

Natalia Sánchez Rocafort

Darktrace's Detection of Ransomware & Syssphinx

Enhancing Darktrace with Microsoft Defender

How Darktrace Triumphed Over MyKings Botnet

Oluwatosin Aturaka

Prevent Cryptojacking Attacks with Darktrace AI Technology

Victoria Baldie

When a Quasar Remote Access Tool Falls Into the Wrong Hands

Qakbot Resurgence in the Cyber Landscape

Nahisha Nobregas

Darktrace Uncovers Persistent PurpleFox Rootkit

Piramol Krishnan

How Darktrace Stopped an Account Hijack Fast

How PlugX Malware Has Evolved & Adapted

Nahisha Nobregas

Pikabot: Battling a Fast-Moving Loader Malware

Industry Insights

How Darktrace Foiled QR Code Phishing

Alexandra Sentenac

Revealing Outlaw's Returning Features & New Tactics

Mitigating Sectop RAT: Darktrace's Strategy

Incident Analysis

Protecting Against AlphV BlackCat Ransomware

Uncover New Malicious Email Payloads in Google Translate

Rachel Resnekov

Industry Insights

Multi-Factor Authentication: Not the Silver Bullet

Modern Extortion: Detecting Data Theft From the Cloud

Adrianne Marques

Lost in Translation: Darktrace Blocks Non-English Phishing Campaign Concealing Hidden Payloads

Rajendra Rushanth

Get The Drop On Phishing Attacks Abusing Dropbox

Defending Against Crypto Thieves with DETECT + RESPOND

Anna Gilbertson

Industry Insights

Behind Yanluowang: Unveiling Cyber Threat Tactics

Taisiia Garkava

Industry Insights

Simulated vs. Real Malware: What You Need To Know

How Darktrace SOC Thwarted a BEC Attack

How Darktrace Defeated SmokeLoader Malware

How Darktrace Antigena Thwarted Cobalt Strike Attack

Abuse of "PerfectData Software" May Create a Perfect Storm

Kill Chain Insights: Detecting AutoIT Malware Compromise

Gozi ISFB Malware Detection Insights and Analysis

Detecting & Containing Gootloader Malware

Steps of a BumbleBee Intrusion to a Cobalt Strike

Protecting Brazilian Organizations from Malware

Industry Insights

The Risks of Remote Access Tools

Industry Insights

Analyst's Guide To Cyber AI Loop

Gabriel Hernandez

Analyzing Log4j Vulnerability in Crypto Mining Attack

Ivanti Sentry Vulnerability | Analysis & Insights

Industry Insights

How Darktrace Halted A DarkGate in MS Teams

Natalia Sánchez Rocafort

Emotet Resurgence: Cross-Industry Analysis

Don’t Take the Bait: How Darktrace Keeps Microsoft Teams Phishing Attacks at Bay

Confluence CVE-2022-26134 Zero-Day: Detection & Guidance

Gabriel Few-Wiegratz

Detecting Unknown Ransomware: A Darktrace Case Study

Industry Insights

Detecting Attacks Across Email, SaaS, and Network Environments with Darktrace’s ActiveAI Security Platform

Account Hijack Prevention: Detect, Respond & Escalate

Lydiane-Ashley Belle

Industry Insights

Detecting Trusted Network Relationship Abuse

Darktrace Stops Large-Scale Account Hijack

How Darktrace AI Blocked Emotet Malspam

Analyzing Post-Exploitation on Papercut Servers

How Darktrace Quickly Foiled An Information Stealer

Alexandra Sentenac

Uncovering CyberCartel Threats in Latin America

Alexandra Sentenac

Connecting the Dots: Darktrace’s Detection of the Exploitation of the ConnectWise ScreenConnect Vulnerabilities

How CoinLoader Hijacks Networks

How Darktrace AI Isn't Fooled by Impersonation Tactics

Bytesize Security: A Guide to HTML Phishing Attachments

Email Compromise To Mass Phishing Campaign

How an Insider Exfiltrated Corporate Data to Google Cloud

Multi-Account Compromise in Office 365

BlackMatter's Smash-and-Grab Ransom Attack Incident Analysis

The Darktrace Analyst Team

How Darktrace Detected Black Basta Ransomware

Darktrace’s Detection of Unattributed Ransomware

Natalia Sánchez Rocafort

Balada Injector: Darktrace’s Investigation into the Malware Exploiting WordPress Vulnerabilities

Understanding Amadey Info Stealer & N-Day Vulnerabilities

How Darktrace Stopped Akira Ransomware

Successfully Containing an Admin Credential Attack

A Thorn in Attackers’ Sides: How Darktrace Uncovered a CACTUS Ransomware Infection

Compliance Threat: RedLine Information Stealer

Vidar Network: Analyzing a Prolific Info Stealer

3CX Supply Chain Attack: Darktrace's Analysis

Nahisha Nobregas