Reports

Report: ⁠https://thedfirreport.com/2024/12/02/the-curious-case-of-an-egg-cellent-resume/

Contact Us: ⁠⁠⁠⁠⁠⁠⁠⁠https://thedfirreport.com/contact/⁠⁠⁠⁠⁠⁠⁠⁠

Services: ⁠⁠⁠⁠⁠⁠⁠⁠https://thedfirreport.com/services/⁠⁠⁠⁠

Report: https://thedfirreport.com/2024/10/28/inside-the-open-directory-of-the-you-dun-threat-group

Contact Us: ⁠⁠⁠⁠⁠⁠⁠https://thedfirreport.com/contact/⁠⁠⁠⁠⁠⁠⁠

Services: ⁠⁠⁠⁠⁠⁠⁠https://thedfirreport.com/services/⁠⁠⁠⁠

Report: https://thedfirreport.com/2024/09/30/nitrogen-campaign-drops-sliver-and-ends-with-blackcat-ransomware

Contact Us: ⁠⁠⁠⁠⁠⁠https://thedfirreport.com/contact/⁠⁠⁠⁠⁠⁠

Services: ⁠⁠⁠⁠⁠⁠https://thedfirreport.com/services/⁠⁠⁠⁠

Report: ⁠https://thedfirreport.com/2024/08/26/blacksuit-ransomware/

Contact Us: ⁠⁠⁠⁠⁠https://thedfirreport.com/contact/⁠⁠⁠⁠⁠

Services: ⁠⁠⁠⁠⁠https://thedfirreport.com/services/⁠⁠⁠⁠

Report: https://thedfirreport.com/2024/08/12/threat-actors-toolkit-leveraging-sliver-poshc2-batch-scripts

Contact Us: https://thedfirreport.com/contact/⁠⁠⁠⁠⁠

Services: ⁠https://thedfirreport.com/services/⁠⁠⁠⁠

Report: https://thedfirreport.com/2024/06/10/icedid-brings-screenconnect-and-csharp-streamer-to-alphv-ransomware-deployment/⁠

Contact Us: ⁠⁠⁠⁠https://thedfirreport.com/contact/⁠⁠⁠⁠

Services: ⁠⁠⁠⁠https://thedfirreport.com/services/⁠⁠⁠

We discuss our latest report "From IcedID to Dagon Locker Ransomware in 29 Days"

Host: ⁠⁠⁠@Kostastsale⁠⁠⁠

Analysts: ⁠⁠⁠@r3nzsec & @angelo_violetti 

Special Guest: ⁠⁠@nas_bench

Report: ⁠⁠⁠https://thedfirreport.com/2024/04/29/from-icedid-to-dagon-locker-ransomware-in-29-days/

Contact Us: ⁠⁠⁠https://thedfirreport.com/contact/⁠⁠⁠

Services: ⁠⁠⁠https://thedfirreport.com/services/⁠⁠⁠

Music by FASSounds from Pixabay

Report: https://thedfirreport.com/2024/04/29/from-icedid-to-dagon-locker-ransomware-in-29-days

Contact Us: ⁠⁠⁠https://thedfirreport.com/contact/⁠⁠⁠

Services: ⁠⁠⁠https://thedfirreport.com/services/⁠⁠

We discuss our latest report From OneNote to RansomNote: An Ice Cold Intrusion

Host: ⁠⁠@Kostastsale⁠⁠

Analysts: ⁠⁠@iiamaleks⁠, ⁠@IrishD34TH⁠, & ⁠@Miixxedup⁠

Special Guest: ⁠@techspence⁠

Feedback: https://forms.office.com/r/LR9NsEWYye

Report: ⁠⁠https://thedfirreport.com/2024/04/01/from-onenote-to-ransomnote-an-ice-cold-intrusion/⁠

Contact Us: ⁠⁠https://thedfirreport.com/contact/⁠⁠

Services: ⁠⁠https://thedfirreport.com/services/⁠⁠

Music by FASSounds from Pixabay

We discuss our latest report From OneNote to RansomNote: An Ice Cold Intrusion

Host: ⁠@Kostastsale⁠

Analysts: ⁠@iiamaleks, @IrishD34TH, & @Miixxedup

Special Guest: @techspence

Report: ⁠https://thedfirreport.com/2024/04/01/from-onenote-to-ransomnote-an-ice-cold-intrusion/

Contact Us: ⁠https://thedfirreport.com/contact/⁠

Services: ⁠https://thedfirreport.com/services/⁠

Music by FASSounds from Pixabay

Full Report - https://thedfirreport.com/2024/04/01/from-onenote-to-ransomnote-an-ice-cold-intrusion

Feedback: https://forms.office.com/r/YY6w3gwd6A

Our first DFIR Discussions podcast on our latest report SEO Poisoning to Domain Control: The Gootloader Saga Continues

Host: @Kostastsale

Analysts: @_pete_0, @malforsec, & @r3nzsec

Special Guest: @HackingLZ⁠

Feedback: https://forms.office.com/r/mK2Jp8vPXj

Report: https://thedfirreport.com/2024/02/26/seo-poisoning-to-domain-control-the-gootloader-saga-continues/

Contact Us: https://thedfirreport.com/contact/

Services: https://thedfirreport.com/services/

Music by FASSounds from Pixabay

Report - https://thedfirreport.com/2024/02/26/seo-poisoning-to-domain-control-the-gootloader-saga-continues

Provide feedback for a chance to win free swag - https://forms.office.com/r/MwZXkBrUNv

Report: https://thedfirreport.com/2024/01/29/buzzing-on-christmas-eve-trigona-ransomware-in-3-hours/

Feedback: https://forms.office.com/r/pPajTA4Vwy