Threat Intelligence

Frontline Mandiant investigations, expert analysis, tools and guidance, and in-depth security research.

Threat Intelligence

Staying a Step Ahead: Mitigating the DPRK IT Worker Threat

North Korea's IT workforce presents a persistent and escalating cyber threat.

By Mandiant • 25-minute read

https://storage.googleapis.com/gweb-cloudblog-publish/images/threat-intelligence-default-banner-simplif.max-1800x1800.png

Google Threat Intelligence News and Alerts

Subscribe now to receive timely news and alerts from Google Threat Intelligence, including the latest threat-focused blog posts, reports, webinars, podcasts and more.

Subscribe now

Threat Intelligence

LummaC2: Obfuscation Through Indirect Control Flow

By Mandiant • 23-minute read

Threat Intelligence

UNC5537 Targets Snowflake Customer Instances for Data Theft and Extortion

By Mandiant • 9-minute read

Threat Intelligence

UNC1860 and the Temple of Oats: Iran’s Hidden Hand in Middle Eastern Networks

By Mandiant • 21-minute read

Threat Intelligence RSS Feed

Want to keep up-to-date on the latest Threat Intelligence posts? Add the Threat Intelligence RSS feed URL to your RSS reader today.

Threat Intelligence RSS feed URL

Threat Intelligence

An Offer You Can Refuse: UNC2970 Backdoor Deployment Using Trojanized PDF Reader

By Mandiant • 22-minute read

Threat Intelligence

Announcing the 11th Annual Flare-On Challenge

By Mandiant • 2-minute read

Threat Intelligence

Protecting Multi-Cloud Resources in the Era of Modern Cloud-Based Cyberattacks

By Mandiant • 2-minute read

Threat Intelligence

Insights on Cyber Threats Targeting Users and Enterprises in Mexico

By Threat Analysis Group • 8-minute read

Threat Intelligence

DeFied Expectations — Examining Web3 Heists

By Mandiant • 18-minute read

Threat Intelligence

A Measure of Motive: How Attackers Weaponize Digital Analytics Tools

By Mandiant • 23-minute read

Threat Intelligence

I Spy With My Little Eye: Uncovering an Iranian Counterintelligence Operation

By Mandiant • 13-minute read

Threat Intelligence

PEAKLIGHT: Decoding the Stealthy Memory-Only Malware

By Mandiant • 22-minute read

Threat Intelligence

"WireServing" Up Credentials: Escalating Privileges in Azure Kubernetes Services

By Mandiant • 9-minute read

Threat Intelligence

Hacking Beyond .com — Enumerating Private TLDs

By Mandiant • 9-minute read