Threat research

Access the latest threat research




New SSA-themed phishing campaign installs trojanized ScreenConnect

Threat report

Cloudflare participates in global operation to disrupt Lumma Stealer

Threat report

Loot, load, repeat: dissecting the Lumma Stealer playbook

Threat brief

SVGs: the hacker’s canvas

Threat spotlight

Black Basta’s blunder: exploiting the gang’s leaked chats

Threat brief

Bitcoin to the moon: Trump endorsing, scammers exploiting

Threat spotlight

Sacked or hacked? Unmasking employment termination scams

Campaign snapshot

Inside LameDuck: analyzing anonymous Sudan’s threat operations

Threat report

Unraveling SloppyLemming’s operations across South Asia

Threat report

Freight fraud surge: global supply chain compromises

Campaign snapshot

Disrupting FlyingYeti's campaign targeting Ukraine

Threat report

Impersonation is fooling the enterprise

Campaign snapshot

Malicious “RedAlert - Rocket Alerts”

Threat brief

Get updates from Cloudforce One