threat

Blog

"Tis the season to be wary": Silent Push tracks Russia-linked threat actor involved in US political spoofing and crypto giveaway scams. Large cluster of IOFA domains discovered.

September 19, 2024

Dark gloved hand reaching through a laptop screen for a wallet that's placed on a desk next to the laptop

Blog

Silent Push tracks threat actor targeting UK banks in ongoing AnyDesk social engineering campaign

August 8, 2024

Painting of the Mona Lisa wearing a Ushanka hat hung up on a dirty wall

Blog

FIN7: Silent Push unearths the largest group of FIN7 domains ever discovered. 4000+ IOFA domains and IPs found. Louvre, Meta, and Reuters targeted in massive global phishing and malware campaigns.

July 10, 2024

Intimidating-looking skull and intersecting swords in front of red dots connected by lines displaying on phone screen. Behind the phone is a pattern of red and blue binary numbers

Blog

'Nuking the Duke': Silent Push uncovers control panel infrastructure for 24 different DukeEugene Android malware variants, including ERMAC and HOOKBOT

June 13, 2024

Chameleon with neon colored-scales typing on laptop keyboard

Blog

'Reptile Recon': Silent Push uses IP diversity queries to map out CryptoChameleon fast flux IOFAs. Hundreds of domains, IPs, and ASNs discovered

May 29, 2024

Telegram phishing

Blog

Silent Push uses content similarity scanning to map out Telegram phishing campaign targeting Eastern Europe and Central Asia

May 17, 2024

Person in a dark room wearing glasses with hand over their mouth to obscure face; reflected on their glasses is the China flag displayed on a laptop

Blog

Silent Push discovers UK.gov websites sending user data to controversial Chinese adtech vendor

April 24, 2024

Open lock in glowing red circuit board, surrounded by skulls and alert messages

Blog

Silent Push maps 2000+ vulnerable IPs linked to GlobalProtect CVE-2024-3400. Active attacker IOFAs caught in PAN-OS honeypot.

April 23, 2024

Scattered spider image on code

Blog

Scattered Spider update: Silent Push analysts use content scans to reveal new phishing infrastructure.

March 7, 2024

ScreenConnect exploit

Blog

'SlashAndGrab' ScreenConnect exploit: 50+ attacker IPs published from Silent Push honeypot.

February 26, 2024