Topic: malicious files

Inside the Qilin Ransomware Investigation

November 23, 2025

83%

Inside the Qilin Ransomware Investigation

Security analysts must creatively piece together limited digital evidence from various sources to reconstruct cyberattacks, as investigations are often complicated by incomplete visibility and delayed tool deployment. In a Qilin ransomware case, investigators used antivirus alerts and Windows log...

Samsung Phones Infected by "Landfall" Spyware for Nearly a Year

The Landfall spyware campaign targeted Samsung Galaxy phones by exploiting a zero-day vulnerability (CVE-2025-21042) to steal personal data without user interaction, using maliciously crafted DNG image files. Samsung released a security patch in April 2025 to fix the vulnerability, and the attack...

SonicWall SMA 100 Series Now Fights Rootkits

SonicWall has released a critical firmware update for its SMA 100 series to scan for and remove the OVERSTEP rootkit, patching vulnerabilities like CVE-2024-38475 in response to a sophisticated attack by threat group UNC6148. The attack involved using stolen credentials to gain unauthorized acces...