Threat Research

Threat Research, Cloud Security

LLMjacking: Stolen Cloud Credentials Used in New AI Attack

The Sysdig Threat Research Team (TRT) recently observed a new attack that leveraged stolen cloud credentials in order to target...
Alessandro Brucato | May 6th, 2024
Read More
Threat Research

Meet the Research behind our Threat Research Team
Threat Research

Building Honeypots with vcluster and Falco: Episode II
Threat Research, Cloud Security

RUBYCARP: A Detailed Analysis of a Sophisticated Decade-Old Botnet Group
Cloud Security (279) Compliance (65) Kubernetes & Container Security (213) Monitoring (97) Open Source (90) Sysdig Features (160) Threat Research (99)
Filter By:
Reset Filters
Showing 13-24 of 90
Cloud Security, Kubernetes & Container Security, Open Source, Threat Research

eBPF Offensive Capabilities – Get Ready for Next-gen Malware

It’s not a mystery that eBPF (Extended Berkeley Packet Filter) is a powerful technology, and given its nature, it can...
Daniele Linguaglossa | September 5th, 2023
LABRAT - Stealthy cryptojacking and proxyjacking campaign targeting GitLab
Threat Research, Cloud Security, Kubernetes & Container Security, Open Source

LABRAT: Stealthy Cryptojacking and Proxyjacking Campaign Targeting GitLab 

The Sysdig Threat Research Team (TRT) recently discovered a new, financially motivated operation, dubbed LABRAT. This operation set itself apart...
Miguel Hernández | August 17th, 2023
Google Vertex AI platform gets freejacked
Threat Research, Cloud Security, Kubernetes & Container Security

Google’s Vertex AI Platform Gets Freejacked

The Sysdig Threat Research Team (Sysdig TRT) recently discovered a new Freejacking campaign abusing Google’s Vertex AI platform for cryptomining....
Michael Clark | August 14th, 2023
Threat Research, Cloud Security, Kubernetes & Container Security

2023 Global Cloud Threat Report: Cloud Attacks are Lightning Fast

The second annual threat report from the Sysdig Threat Research Team (Sysdig TRT) is packed with their findings and analysis...
Michael Clark | August 2nd, 2023
Threat Research, Cloud Security, Kubernetes & Container Security

SCARLETEEL 2.0: Fargate, Kubernetes, and Crypto

SCARLETEEL, an operation reported on by the Sysdig Threat Research Team last February, continues to thrive, improve tactics, and steal...
Alessandro Brucato | July 11th, 2023
Threat Research, Cloud Security, Kubernetes & Container Security

KeePass CVE-2023-32784: Detection of Processes Memory Dump

During May, a new vulnerability CVE-2023-32784 was discovered that affected KeePass. KeePass is a popular open source password manager which...
Miguel Hernández | June 13th, 2023
Proxyjacking had entered the chat
Threat Research, Cloud Security, Kubernetes & Container Security

Proxyjacking has Entered the Chat

Did you know that you can effortlessly make a small passive income by simply letting an application run on your...
Crystal Morin | April 4th, 2023
Sysdig Features, Cloud Security, Kubernetes & Container Security, Threat Research

How to Detect SCARLETEEL with Sysdig Secure

The recent SCARLETEEL incident highlights the importance of detecting security threats early in the development cycle. With Terraform state files,...
Nigel Douglas | March 29th, 2023
Kubernetes & Container Security, Cloud Security, Sysdig Features, Threat Research

CSI Container: Can you DFIR it?

Do you like detective series? Have you ever thought about them actually taking place in cybersecurity? What do you think...
Stefano Chierici | March 28th, 2023
Threat Research, Cloud Security, Kubernetes & Container Security

Chaos Malware Quietly Evolves Persistence and Evasion Techniques

The name Chaos is being used for a ransomware strain, a remote access trojan (RAT), and now a DDoS malware...
Nicholas Lang | March 17th, 2023
Bypassing Network Detection with Graftcp
Cloud Security, Kubernetes & Container Security, Threat Research

Bypassing Network Detection with Graftcp

A new network open source tool called graftcp (GitHub page) has been discovered in everyday attacks by the Sysdig Threat...
Biagio Dipalma | March 7th, 2023
SCARLETEEL cloud attack AWS
Threat Research, Cloud Security

SCARLETEEL: Operation leveraging Terraform, Kubernetes, and AWS for data theft

The Sysdig Threat Research Team recently discovered a sophisticated cloud operation in a customer environment, dubbed SCARLETEEL, that resulted in...
Alberto Pellitteri | February 28th, 2023
1 2 3 4 … 8

Subscribe to our newsletter and get the latest updates!