FIRESTARTER Backdoor
Malware Analysis Report at a GlanceMalware NameFIRESTARTEROriginal PublicationApril 23, 2026Executive SummaryThe Cybersecurity and Infrastructure Security Agency (CISA) analyzed a sample of FIRESTARTER...
View ArticleBRICKSTORM Backdoor
Malware Analysis at a GlanceMalware Name BRICKSTORMOriginal PublicationDec. 4, 2025 Last UpdateFeb. 11, 2026 Executive SummaryThe Cybersecurity and Infrastructure Security Agency (CISA), National...
View ArticleMalicious Listener for Ivanti Endpoint Mobile Management Systems
Malware Analysis at a GlanceExecutive SummaryThe Cybersecurity and Infrastructure Security Agency (CISA) obtained two sets of malware from an organization compromised by cyber threat actors exploiting...
View ArticleMAR-251132.c1.v1 Exploitation of SharePoint Vulnerabilities
NotificationThis report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained...
View ArticleMAR-10454006-r3.v1 Exploit Payload Backdoor
NotificationThis report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained...
View ArticleMAR-25993211-r1.v1 Ivanti Connect Secure (RESURGE)
Notification This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained...
View ArticleMAR-10448362-1.v1 Volt Typhoon
NotificationThis report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained...
View ArticleMAR-10478915-1.v1 Citrix Bleed
NotificationThis report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained...
View ArticleMAR-10454006.r5.v1 SUBMARINE, SKIPJACK, SEASPRAY, WHIRLPOOL, and SALTWATER...
NotificationThis report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained...
View ArticleMAR-10430311-1.v1 Multiple Nation-State Threat Actors Exploit CVE-2022-47966...
NotificationThis report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained...
View ArticleInfamous Chisel Malware Analysis Report
Infamous Chisel–A collection of components associated with Sandworm designed to enable remote access and exfiltrate information from Android phones.Executive SummaryInfamous Chisel is a collection of...
View ArticleMAR-10459736.r1.v1 WHIRLPOOL Backdoor
NotificationThis report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained...
View ArticleMAR-10454006.r4.v2 SEASPY and WHIRLPOOL Backdoors
NotificationThis report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained...
View ArticleMAR-10454006-r2.v1 SEASPY Backdoor
NotificationThis report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained...
View ArticleMAR-10454006-r3.v1 Exploit Payload Backdoor
NotificationThis report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained...
View ArticleMAR-10454006-r1.v2 SUBMARINE Backdoor
NotificationThis report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained...
View ArticleMAR-10445155-1.v1 Truebot Activity Infects U.S. and Canada Based Networks
NotificationThis report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained...
View Article