Joined August 2017
- Tweets 3,076
- Following 1,364
- Followers 13,809
- Likes 5,980
699 Photos and videos
Jun 12
Recent activity attributed to #UNC3753 and other groups highlights a growing trend in which #ThreatActors increasingly prioritize data theft & extortion over traditional #ransomware deployment. @googlecloud recently reported on this activity.
blog.polyswarm.io/the-evolvi…
2
4
242
Jun 10
More engines = more perspectives.
More perspectives = fewer blind spots.
PolySwarm brings independent malware detections together in one place.
#CyberSecurity #ThreatIntelligence #Malware #ThreatHunting
2
2
5
279
Researchers identified #Weedhack, a #Minecraft-focused #MaaS operation spreading through fake mods, SEO poisoning, & YouTube. The platform enables credential theft, crypto theft, account hijacking, and remote access for as little as $5/month. Learn more: blog.polyswarm.io/from-minec…
2
7
20
1,053
Children's hospitals face unique threats. Stolen #pediatric records can fuel identity fraud for decades, while #ransomware attacks can directly impact patient care. Learn why pediatric #healthcare remains a high-value target & explore related samples: blog.polyswarm.io/stolen-fut…
1
2
7
379
#IRGC-affiliated Nimbus Manticore is evolving its tradecraft with the MiniFast backdoor, AppDomain Hijacking, SEO poisoning, and stealthy persistence techniques targeting aviation, defense, telecom, and software sectors.
blog.polyswarm.io/iranian-th…
#ThreatIntel #APT #CyberSecurity
4
8
613
May 29
#Lazarus-linked actors are targeting financial institutions and #cryptocurrency organizations with a stealthy #malware chain built around DPAPILoader and the memory-resident RemotePE RAT. PolySwarm analyzed related samples, infrastructure, and TTPs:
blog.polyswarm.io/lazarus-ex…
1
6
16
1,026
May 22
Kazuar #malware used by #Russia-linked Turla has evolved into a modular espionage framework built for stealth, resilience, and long-term intelligence collection. @Microsoft recently detailed the activity.
More in our blog related PolySwarm samples:
blog.polyswarm.io/kazuar-evo…
1
9
25
1,569
May 18
TeamPCP-linked supply chain attacks abused GitHub Actions, PyPI, Docker Hub, npm, and VS Code ecosystems to steal developer credentials and cloud secrets. New claims involving alleged Mistral AI repos may signal growing targeting of AI dev environments.
blog.polyswarm.io/inside-tea…
1
8
25
1,904
May 15
SHADOW-EARTH-053 is exploiting legacy Microsoft Exchange infrastructure to target governments and critical infrastructure across Asia with ShadowPad malware and credential theft.
blog.polyswarm.io/shadow-ear…
#CyberSecurity #ThreatIntelligence #APT #ThreatHunting #PolySwarm
1
3
8
620
May 11
A large-scale supply chain compromise involving DAEMON Tools exposed users to malware delivered through digitally signed installers hosted on legitimate infrastructure.
blog.polyswarm.io/daemon-too…
#CyberSecurity #ThreatIntelligence #Malware
5
13
891
Great conversations going on this week at the #HealthISAC Spring Americas Summit.
One thing is clear: the gap between what organizations think they can see and what’s actually happening in their environments is becoming a major security risk.
#CyberSecurity #HealthcareSecurity
1
2
11
487
65% of orgs have already had an AI agent-related security incident.
68% think they have visibility.
82% have already found agents they didn’t know existed.
That gap isn’t theoretical. It’s where risk lives.
blog.polyswarm.io/ai-agents-…
4
8
530
#Healthcare remains the most targeted critical infrastructure sector for #cyberattacks, driven by #ransomware, large-scale data theft, and increasing geopolitical activity. Check out our blog for more info and PolySwarm’s related samples.
blog.polyswarm.io/critical-c…
5
12
569
The #HealthISAC 2026 Spring Americas Summit kicks off this week in Tampa.
We’ll be there connecting with healthcare security leaders & talking threat intelligence, malware, & emerging cyber risks.
If you're attending, come find us!
#CyberSecurity #HealthcareSecurity #HealthIT
1
2
9
801
Cyber risk in the #aviation & #aerospace sector is evolving toward #ransomware, identity-based intrusion, platform-level disruption, & potential impacts to navigation & satellite-dependent services. Check out our blog for more info & related samples.
blog.polyswarm.io/turbulence…
6
9
1,089
Apr 27
The Gentlemen #ransomware-as-a-service (#RaaS) operation has rapidly scaled in early 2026, leveraging multi-platform encryption capabilities and enterprise-focused intrusion techniques. @_CPResearch_ recently reported on this activity.
blog.polyswarm.io/the-gentle…
1
5
20
1,864
Apr 24
#ZionSiphon is an OT-focused #malware sample designed to identify & interact with water treatment & desalination environments. It was used to target water treatment systems in #Israel. Our analysts have provided info on the activity & related samples.
blog.polyswarm.io/zionsiphon…
3
9
559
Apr 17
A joint US government advisory confirmed that #Iran-affiliated cyber actors are actively exploiting internet-facing industrial control systems, particularly Rockwell Automation/Allen-Bradley PLCs, across US critical infrastructure.
blog.polyswarm.io/iran-linke… #CyberSecurity #InfoSec
3
8
20
1,597
Apr 14
We’re heading to @HealthISAC’s 2026 Spring Americas Summit in Tampa this May. Looking forward to connecting with healthcare security leaders to discuss the latest in threat intelligence and malware detection.
If you’re attending, let’s meet.
#CyberSecurity #HealthcareSecurity
6
18
1,183
Apr 14
We are excited to partner with @ZeroFox to bring multi-engine malware analysis into their platform. Enabling faster validation and stronger threat intelligence is exactly where collaborative security models make an impact.
zerofox.com/press-release/ze…
#ThreatIntel #CyberSecurity
2
9
28
1,504