Analysis of malware campaigns and ransomware. Recognize attack techniques and indicators of compromise, with practical prevention and incident response guidance.
Unit 42 says CL-STA-1238 used the Cairn AI framework with Zhipu GLM and DeepSeek in 25 campaigns targeting at least 19 organizations. Ten organizations experienced unauthorized access or data theft; relevant organizations should review accounts, credentials, and signs of lateral movement.
Qilin is a ransomware-as-a-service operation active since September 2022, using affiliates to breach organizations and deploy ransomware. It steals data before encrypting systems and threatens disclosure; organizations should review their ability to detect intrusions, data theft, and…
Copyright © 2026 ViSafe (visafe.net) · A blog sharing cybersecurity knowledge
