CYFIRMA Research

Mamba 2FA illustrates the evolution of phishing into highly automated adversary-in-the-middle attacks that can bypass traditional MFA by closely emulating legitimate cloud authentication experiences. As part of a broader phishing-as-a-service ecosyst... more

Emerging Threat Model: SOLYXIMMORTAL Malware

Recent analysis highlights how modern commodity malware continues to evolve by abusing legitimate system functionality rather than relying on exploits or vulnerabilities. The malware demonstrates how atta... more

Stay ahead with CYFIRMA’s December 2025 Ransomware Report.

December marked the most active month of 2025 with 801 global ransomware victims, signaling a strong year-end escalation. Qilin surged to 175 victims, reinforcing its dominance, while Safepa... more

The threat landscape just got more complex. The Scattered LAPSUS$ Hunters-alliance has re-emerged, merging the tactics of notorious groups.

This isn’t just a name change; it’s a shift toward professionalized, identity-centric extortion.

What you nee... more

APT36 Targets Indian Entities Using Weaponized Windows Shortcut Files

CYFIRMA has identified a coordinated cyber-espionage campaign attributed to APT36 (Transparent Tribe), a Pakistan-aligned threat actor persistently targeting Indian government ent... more

Hacktivist activity is often dismissed as low-sophistication noise, website defacements, DDoS attacks, or online activism.

Our latest research argues that this view is increasingly outdated.

The report introduces Hacktivist Proxy Operations as a re... more

Threat Alert: APT 36

CYFIRMA has identified a targeted malware campaign abusing fake NCERT WhatsApp advisory PDFs to compromise Windows systems.

Link to the Research Report: APT36 LNK-BASED MALWARE CAMPAIGN LEVERAGING MSI PAYLOAD DELIVERY - CYFIRMA... more

A sophisticated QR-code phishing (“quishing”) campaign is targeting employees with payroll-themed lures, bypassing email security and harvesting credentials via obfuscated, per-victim infrastructure. This trend underscores the growing risk of mobile-... more