Skip to content
      Videos
      Featured Threat Research

      Revealing Emperor Dragonfly: Night Sky & Cheerscrypt - A Single Ransomware Group

          Key Takeaways Sygnia recently investigated a Cheerscrypt ransomware attack which utilized Night Sky ransomware TTPs. Further analysis       revealed that Cheerscrypt and...

      Read More

      All Resources

      Community Tool
      Incident Response Threat Hunting Blog Post

      Incident Response in Google Cloud: Foundations

      Incident response and threat hunting in Google Cloud Platform and Workspace Read More
      Videos
      Featured Threat Research

      Revealing Emperor Dragonfly: Night Sky & Cheerscrypt - A Single Ransomware Group

      The outcome of investigation by Sygnia's incident response teams - Cheerscrypt & Night Sky are rebrands of one ransomware group, named ‘Emperor Dragonfly’. Read More
      Blog Post
      Featured Incident Response Threat Hunting

      Vice Society-the Ransomware Group the Health and Education Sectors Should Look Out For

      Professionals across all industries, agree that the Vice Society ransomware group is a major cyber threat, especially in health & education sector Read More
      Blog Post
      Featured Incident Response Threat Hunting

      The Vice Society TTPs: Insights from a Real-World Ransomware Investigation

      Get technical insights based on forensic investigations of Vice Society (ransomware group carrying out double extortion attacks) conducted by our IR team. Read More
      Press Release

      Sygnia Expands Investment in Operational Technology Security with Hire of New Vice President

      Sygnia announced today that Rafael Maman is joining the team as its new Vice President of Operational Technology . Read More
      Blog Post
      Featured Community Tool Adversary Security red team infrastructure

      Offensive CI/CD – A Cat on a Vessel

      Leveraging CI CD pipelines to automate implementation of evasion techniques in offensive tools - enacting adversary simulation tasks without detection. Read More
      Videos
      Featured Threat Report Threat Research

      Luna Moth: The Threat Actors Behind Recent False Subscription Scams

      Sygnia’s team identified 'Luna Moth' ransom group. The threat actors resemble false subscription scammers, focusing on corporate data theft. Read More
      Press Release
      Incident Response

      Sygnia Shortlisted in Two Categories of the 2022 SC Awards Europe

      Sygnia joins industry leaders in “Best Incident Response Solution” and “Best Security Company” categories. Read More
      Blog Post
      Featured Incident Response Threat Hunting

      The Misconceptions of 2021's Black Swan Cyber Events

      Here are 3 common misconceptions about Black swan events that are considered incidents with high impact and low frequency that are impossible to predict. Read More
      Blog Post
      Featured Incident Response Threat Hunting

      Hybrid Phishing Attack Vector – Complementing Phishing Campaigns with Wide Infrastructure Exploitations

      Cyber-crime groups are targeting Java-based infrastructures susceptible to the Log4Shell vulnerability and are delivering Qakbot phishing emails Read More
      Analyst Report

      GARTNER MARKET GUIDE

      Download a complimentary copy of the Gartner Market Guide for Digital Forensics and Incident Response Services (DFIR) Services. Read More
      Analyst Report

      FORRESTER NOW TECH: CYBERSECURITY INCIDENT RESPONSE SERVICES, Q4 2021 REPORT

      Forrester Now Tech - Download a complimentary copy to get an overview of 36 Cybersecurity Incident Response Providers Read More
      Advisory
      Featured Incident Response Threat Hunting

      Sygnia Advisory: Key takeaways from leak of Conti crime group internal communications

      Following our analysis of the leaked Conti information we would like to share some insights regarding the group’s modus operandi. Read More
      Blog Post
      Featured Incident Response Threat Hunting

      Breaking Down the Casbaneiro Infection Chain

      The Casbaneiro banking trojan targets financial organizations to steal user data for financial gain. Get a detailed “attacker fingerprint”. Read More
      Advisory
      Featured Incident Response Threat Hunting

      Sygnia Advisory: Potential Okta Breach

      In light of evidence of a successful Okta breach, we recommend taking several steps to mitigate potential risk for organizations leveraging Okta solutions. Read More
      Advisory
      Featured Incident Response Threat Hunting

      Advisory: Russia–Ukraine Conflict Escalation

      An advisory to keep leadership updated & support global organizations enhance cyber resilience as we monitor the conflict between Russia & Ukraine. Read More
      Press Release
      Incident Response

      Amir Becker Joins Sygnia to Lead Global Incident Response Division

      Sygnia announced today that Amir Becker is joining the team as its new Vice President of Incident Response. Read More
      Sygnia Blog
      Incident Response Threat Research Blog Post

      7 Cyber Attacks That Kept the Industry Talking in 2021

      A journey back through 2021 - What we’ve learned from 5 major cyber attacks that took place in 2021 as well as 2 new threat actors identified by Sygnia. Read More
      Press Release
      Incident Response

      Sygnia to Host Webinar on Actionable Incident Response Strategies for 2022

      Sygnia's cybersecurity experts to deliver actionable Incident Response (IR) strategies organizations worldwide can leverage. Read More
      Videos
      Featured Threat Report Threat Research

      Elephant Beetle: Uncovering an Organized Financial-Theft Operation

      Sygnia’s IR team has identified the Elephant Beetle threat group, an organized, significant financial-theft operation threatening global enterprises.  Read More
      Sygnia Blog
      Adversary Security Blog Post

      It's a Threat Actor's Paradise: Getting Ahead of Attackers in 2022

      Achieving cyber resilience in the hostile attack terrain comes down to an organization’s ability to flip the asymmetry between them and the threat actors. Read More
      Blog Post
      Featured Incident Response Threat Hunting

      End-to-End LOG4SHELL Hunting Strategy

      Defenders, hunt for Log4Shell exploitation attempts, distinguish between failed and successful attempts and identify post-exploitation activities. Read More
      Advisory
      Incident Response Threat Hunting

      Sygnia Advisory: Log4Shell Remote Code Execution

      Critical remote code execution vulnerability in a software logging package called “Log4Shell” (CVE-2021-44228) is impacting millions of devices globally Read More
      Press Release
      Incident Response

      SYGNIA RECOGNIZED IN 2021 GARTNER® MARKET GUIDE FOR DIGITAL FORENSICS AND INCIDENT RESPONSE SERVICES

      Sygnia has been recognized as a Representative Vendor in 2021 Gartner Market Guide for Digital Forensics and Incident Response Services. Read More
      Press Release

      SYGNIA EXPANDS INTO EUROPE TO MEET INCREASING CLIENT DEMAND

      Following impressive growth, Sygnia opens its first European office in London. Read More
      Blog Post
      Incident Response Threat Hunting

      Recent Waves of Phishing Attacks Overpowering 2-factor Authentication

      Phishing attacks are still a leading attack vector for threat actors globally, & are evolving in prevalence & sophistication given work-from-home models Read More
      Threat Report
      Threat Research

      Praying Mantis An Advanced Memory Resident Attack

      Sygnia researchers identified an advanced threat actor targeting high profile US organizations, using nation-state attack methods, and operating in-memory. Read More
      Community Tool
      Adversary Security

      Cloud Scout: a New Open Source Tool for Cloud Security

      Cloud Scout, an open-source tool for cloud security - Map cloud (& hybrid) environments, identify attack paths & vulnerabilities, and enhance resilience. Read More
      Threat Report
      Incident Response Threat Research Threat Hunting Ransomware

      Lazarus Group’s Mata Framework Leveraged To Deploy TFlower Ransomware

      Sygnia: Double extortion ransomware attack - threat actor leveraged an undocumented variant of MATA to distribute and execute the TFlower ransomware. Read More
      Advisory
      Incident Response Threat Hunting Ransomware

      Kaseya Ransomware Supply Chain Attack

      Get a deep dive into the Kaseya ransomware attack, and how you can deploy effective defense strategies. Read More
      Advisory
      Incident Response Threat Hunting Ransomware

      Detection And Hunting Of Golden SAML Attack

      Get actionable insights on how to detect a Golden SAML attack vector and an overview of the compromise at SolarWinds. Read More
      Advisory
      Incident Response Threat Hunting

      Demystifying The PrintNightmare Vulnerability

      Learn about the PrintNightmare vulnerability, why it's such a cause for concern and how to mitigate the risk. Read More