Ransomware
Initial Access Methods: How Malicious Actors Do Infiltrate Companies?
Initial access explained: the five MITRE ATT&CK techniques attackers use to get into a network, how to detect each one, and how to reduce the risk.
Blog · 528 Articles
Blog. Cybersecurity And Risk.
Threat actors, dark web activity, ransomware and digital risk, explained by the analysts who track them.
02 All Articles
All Blog Articles. Newest First.
Ransomware
Learn How to Avoid Hackers with 3 Easy Steps
Hackers are constantly operating in the dark web network. They share among themselves the evil deeds they do to do business or to gain a reputation.
APT Group Articles
Equation APT Group
Equation Group profile: operations since 2001, zero-day exploits, hard drive firmware persistence, self-destructing malware and links to Stuxnet and Flame.
Ransomware
LockBit 3.0 Technical Analysis Report
LockBit 3.0, also called LockBit Black, followed LockBit 2.0 with Zcash payments, a leak site search and a bug bounty program. See what changed.
APT Group Articles
APT Groups Actively Involved During the Russia-Ukraine Cyber War
Which APT groups took part in the Russia-Ukraine cyber war? See the groups named, what they hit in Ukraine, and why firewalls and antivirus fall short.
DRPS Articles
Detecting Phishing Emails
How to spot a phishing email: check the sender domain, links, spelling, urgency, attachments and signature, then report it. A short guide to digital risks.
APT Group Articles
Lazarus APT Group (APT38)
Lazarus APT is a North Korean state-sponsored group active since at least 2009. See its aliases, targets, history, tools and how to defend against it.
APT Group Articles
Mythic Leopard APT Group
Mythic Leopard, also called APT36 and Transparent Tribe, is a suspected Pakistan-based group. See aliases, targets, timeline, tools and defenses.
APT Group Articles
Dynamite Panda APT Group
Dynamite Panda is the name used for APT18, a threat group active since at least 2009. See its targets, malware, techniques and how to defend against it.
APT Group Articles
El Machete APT Group
El Machete (APT-C-43) is a suspected Spanish-speaking espionage group active since 2010. See its targets, spearphishing tactics and how to defend.
Dark Web
Top Open Source Intelligence (OSINT) Tools for Dark Web
OSINT, or Open Source Intelligence, can scan to Decipher and find connections between criminals and other actors around them.
Dark Web
Top Deep Web Websites for Threat Intelligence
The deep web and dark web hide sites from standard search. See which forums, markets, leak sites, IRC and Telegram channels give useful threat data.
03 More To Read
010203040506
Threat Research
What a 0-Day Ad Really Sells: 37 of 93 Are Unnamed-Exploit Claims
Threat Research
What WormGPT and Other AI-Branded Tool Ads Sell
Threat Research
Why Web Shell, cPanel and RDP Prices Do Not Add Up
Threat Research
The September Surge in Access-Labelled Posts
Threat Research
Most Initial Access Offers We Read Sold Websites, Not Networks
Threat Research
Anatomy of a Corporate Network Access Listing
05 FAQ
About The Blog.
Knowledge Hub →01What does the Brandefense blog cover?
Articles on ransomware, APT groups, the dark web, digital risk protection, fraud, sector analysis and VIP security, written for security teams.
02How often is the blog updated?
The newest articles appear first, and every article shows its publish date.
03How do I find articles on one topic?
Use the topic links above the list to open one topic, or type a word in the search box. Search and topic filters cover the full article collection.
04Where do the facts in the articles come from?
Articles draw on public sources such as CISA advisories, MITRE ATT&CK and ENISA reports. Sources are listed at the end of an article when it cites them.
05How do I get new articles by email or feed?
The site feed at brandefense.io/feed/ lists new posts. The email sign-up box is on the All Resources and Reports pages.
06What does Brandefense do?
Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo from the Request A Demo page.
07How many articles are on the Brandefense blog?
This collection currently contains 528 public articles. The page shows the total at the top and the count for each topic next to its name. Each article shows its publish date.
08Who writes the Brandefense blog?
The blog describes its articles as explained by the analysts who track threats. They cover threat actors, dark web activity, ransomware and digital risk. The newest articles appear first.
09Does the blog have articles about APT groups?
Yes. The Knowledge Hub also holds profiles of threat groups. Use the topic links or article search to explore the coverage.
10What is the difference between the deep web, the dark web and the surface web?
The surface web is the part of the internet that search engines list. The deep web is content that search engines do not list, such as pages behind a login. The dark web needs special software to reach.
Stay Ahead of Digital Threats.
Take control of your digital security with an exclusive demo of our AI-driven threat intelligence platform.