Cybereason Blog
cybereason.com · Company blog · on HN since 2014
Cybereason's company blog covers malware analysis, threat research, and ransomware, plus its Malicious Life podcast on hacking history.
What HN saysHN commenters mostly link it for Malicious Life podcast episodes on Mitnick and Huawei, and for threat reports such as Operation Cobalt Kitty.
24HN people shared it
10linked it in comments
22stories submitted
323story points
6 months agolast shared
2014people per year2026
Most-shared posts
- 1OSX.Pirrit Mac Adware Part III: The DaVinci Code2 people · 113 points · first shared 2017 · 23 comments on HN
- 23.5M servers vulnerable to latest attack – patch your exim servers now2 people · 1 points · first shared 2019 · discussion on HN
- 3Ebook ransomware the true cost to business2 people · first shared 2021
- 4Proton.B: What this Mac malware does1 people · 170 points · first shared 2017 · 87 comments on HN
- 5Cybereason Uncovers Chinese Intellectual Property Theft Operation1 people · 7 points · first shared 2022 · discussion on HN
- 6North Korea Is Unlikely to Be Behind the WannaCry Attack1 people · 4 points · first shared 2017 · discussion on HN
- 7Hacking Team Leak Unleashes Flame-Like Capabilities into the Wild1 people · 3 points · first shared 2015 · discussion on HN
- 8Three Chinese Threat Actors Targeting Major Telcos1 people · 3 points · first shared 2021 · discussion on HN
- 9Background on Darkside – the group behind the pipeline ransomware attack1 people · 3 points · first shared 2021 · discussion on HN
- 10Operation Bearded Barbie: Cyber Espionage Campaign Targeting Israeli Officials1 people · 2 points · first shared 2022 · discussion on HN
- 11TA505 Targets Financial Enterprises Using Lolbins and a New Backdoor Malware1 people · 2 points · first shared 2019 · discussion on HN
- 12Operation Cobalt Kitty: Analysis of a Large-Scale OceanLotus APT in Asia1 people · 2 points · first shared 2017 · discussion on HN
- 13The Newest Variant of the Astaroth Trojan Evades Detection in the Sneakiest Way1 people · 2 points · first shared 2019 · discussion on HN
- 14Siofra, partly-open source tool for scanning all DLLs for hijacking vulns1 people · 2 points · first shared 2017 · discussion on HN
- 15A New Persistent Attack Methodology Targeting Microsoft OWA1 people · 2 points · first shared 2015 · 1 comments on HN
What HN people wrote when they linked it
firebot · 2026-05-01
Hackers 2: operation takedown is based on a true story.
https://www.cybereason.com/blog/malicious-life-podcast-kevin-mitnick-p…
> his brother introduced him to a hacker named Eric Heinz, who told him about a mysterious piece of equipment he came across while breaking into Pacific Bell: SAS, a testing system that allowed its user to listen in on all the calls going through the telephone network. SAS proved to be too great of a temptation for Mitnick, who desperately wanted to wield the power that the testing system could afford him.
Then of course other people started finding similar black boxes at other telecoms and data centers.
Ghosts in the wire (his book) mainly focuses on the FBI using the system for wiretaps. And if they can, I'm sure the NSA could just as easily.
3np · 2021-08-13
Huawei is following their playbook from the Nortel days. Why would anyone expect them to stop doing what brought them to success?
Malicious Life made a great 3 episode podcast series on that.
https://www.cybereason.com/blog/malicious-life-podcast-chinas-unrestri…
https://en.wikipedia.org/wiki/Criticism_of_Huawei#Nortel
phrasz · 2014-02-13
The catalyst: http://www.cybereason.com/#movie
consumer451 · 2023-12-10
I can't speak to that particular attack vector today, but it's interesting that McAfee isn't even on this chart, and that Microsoft is now a leader. Times have really changed in that space.
https://www.cybereason.com/blog/cybereason-named-a-leader-in-2022-gart…
brazzy · 2023-04-27
The table lower in the article gives very searchable "other names", leading to examples:
https://attack.mitre.org/groups/G0050/
https://www.cybereason.com/blog/operation-cobalt-kitty-apt
https://en.wikipedia.org/wiki/DarkHotel
djrogers · 2021-07-19
The current trend is double-extortion ransomware attacks - encrypt your copy of your data, and threaten to release it publicly as well.
[1] https://www.cybereason.com/blog/rise-of-double-extortion-shines-spotli…
jessaustin · 2021-06-18
The "journalism" has been shoddy from the start. This entire "Russians are pwning the electric company" meme has always been motivated more by politics, CYA, PR, and marketing than it has by anything real. TFA itself is a mail-it-in, paraphrase-the-press-release "effort". They actually link to the press release rather than the original marketing document; it's possible TFA's authors haven't read the latter! There's no guarantee the marketing document answers your question, but if you have an email address you don't mind getting spammed you could find out for yourself. [0] I don't have such an email address.
[0] https://www.cybereason.com/ebook-ransomware-the-true-cost-to-business
skybrian · 2021-06-18
There's a somewhat better article about the survey here [1], including which countries were surveyed.
It looks like you can download the full report by filling out a form [2]. (So I didn't.)
[1] https://www.zdnet.com/article/most-firms-face-second-ransomware-attack…
[2] https://www.cybereason.com/ebook-ransomware-the-true-cost-to-business
peterburkimsher · 2019-09-22
We had a problem with malware mining Bitcoin on our AWS instance a few weeks ago:
https://www.cybereason.com/blog/new-pervasive-worm-exploiting-linux-ex…
saagarjha · 2017-12-13
The images were broken for me, so I found the PDF a lot better of a read: https://www.cybereason.com/hubfs/Content%20PDFs/OSX.Pirrit%20Part%20II…