A novel phishing campaign by Russia-nexus espionage actors targeting European government and military organizations.

A novel phishing campaign by Russia-nexus espionage actors targeting European government and military organizations.

We discovered China-nexus threat actors deployed custom backdoors on Juniper Networks’ Junos OS routers.

Mandiant exploited flaws in the Microsoft Software Installer repair action of Lakeside Software's SysTrack installer to obtain arbitrary code execution.

We been tracking multiple espionage operations conducted by China-nexus actors utilizing POISONPLUG.SHADOW malware.

I’ve been asked a few times in the past month for tips that I use to troubleshoot YARA-L rules. As I thought about it, I realized this covers a lot of ground because when building detection logic, we ...

A Gemini-powered tool to reduce response and triage time when faced with increasingly large and complex malware.

Learn how Mandiant Red Team is using Gemini and LLMs for adversarial emulation and defense.

Mandiant analyzed 138 vulnerabilities that were disclosed in 2023 and that we tracked as exploited in the wild.

ALT: two men are standing next to each other with the words " we open it up " on the screen

When used for malware analysis, Gemini now has capabilities to address obfuscation, and obtain insights on IOCs.

A campaign targeting Snowflake customer database instances with the intent of data theft and extortion.