Network | Darktrace

Beyond the Office: Tracking Identity-Based Threats in a Hybrid World

Senior Cyber Analyst

A Chain Reaction: Blockchain-Hosted Infostealer Campaign Targets Windows and macOS

Nahisha Nobregas

When AI Agents Attack: The Case for Behavioral Anomaly Detection

Senior Director of Product

Hiding in Plain Sight: Uncovering a Multi-Stage Ransomware Attack Through Behavioral Detection

Alexandra Evzona

From Click to Command: Behavioral Detection of AppleScript-Led MacOS Intrusions

Hola VPN Abuse: From Proxy Traffic to Malware and Cryptomining

Cyber Security Analyst

How Attackers Abuse the Chinese Nezha Monitoring Tool

Malware Research Engineer

When Open Source Is Weaponized: Analysis of a Trojanized 7 Zip Installer

中国系APTキャンペーン、アップデートされたFDMTPバックドアで企業を狙う

Malware Research Lead

When Trust Becomes the Attack Surface: Supply-Chain Attacks in an Era of Automation and Implicit Trust

Nathaniel Jones

SVP, Global Threat Intelligence

ダークトレース、2026年Gartner® Network Detection and Response（NDR）部門のMagic Quadrant™レポートにおいて2年連続でLeaderの1社に認められる

Senior Product Marketing Manager

How a Compromised eScan Update Enabled Multi‑Stage Malware and Blockchain C2

Associate Principal Analyst

中国系サイバー作戦の進化－それはサイバーリスクおよびレジリエンスにとって何を意味するか

Nathaniel Jones

SVP, Global Threat Intelligence

Phantom Footprints: Tracking GhostSocks Malware

When Reality Diverges from the Playbook: Darktrace Identifies Encryption in a World Leaks Ransomware Attack

Senior Cyber Analyst & Team Lead

NetSupport RAT: How Legitimate Tools Can Be as Damaging as Malware

Analyst Consulting Lead – AMS

CVE-2026-1731: How Darktrace Sees the BeyondTrust Exploitation Wave Unfolding

Global Threat Research Operations Lead

AI/LLMで生成されたマルウェアを使ったReact2Shellエクスプロイト

Malware Research Engineer

AppleScript Abuse: Unpacking a macOS Phishing Campaign

Malware Research Lead

Darktrace Malware Analysis: Unpacking SnappyBee

Malware Research Engineer

金融セクターにおけるサイバーセキュリティの現状：注目すべき6つの傾向

Nathaniel Jones

SVP, Global Threat Intelligence

ダークトレース、韓国を標的とした、VS Codeを利用したリモートアクセス攻撃を特定

Malware Research Lead

Maduro Arrest Used as a Lure to Deliver Backdoor

Malware Research Lead

Under Medusa’s Gaze: How Darktrace Uncovers RMM Abuse in Ransomware Campaigns

Principal Cyber Analyst

React2Shell: How Opportunist Attackers Exploited CVE-2025-55182 Within Hours

Malware Research Engineer

Atomic Stealer: Darktrace’s Investigation of a Growing macOS Threat

CastleLoader & CastleRAT: Behind TAG150’s Modular Malware Delivery System

Xillen Stealer Updates to Version 5 to Evade AI Detection

Malware Research Lead

Unmasking Vo1d: Inside Darktrace’s Botnet Detection

Christina Kreza

Darktrace Named the Only 2025 Gartner® Peer Insights™ Customers’ Choice for Network Detection and Response

Senior Product Marketing Manager

Tracking a Dragon: Investigating a DragonForce-affiliated ransomware attack with Darktrace

WSUS Exploited: Darktrace’s Analysis of Post-Exploitation Activities Related to CVE-2025-59287

Global Threat Research Operations Lead

Darktrace Redefines NDR: Industry-First Autonomous Threat Investigation from Network to Endpoint with Agentic AI

Senior Product Marketing Manager

Salt Typhoon侵入事例に対するダークトレースの視点

Nathaniel Jones

SVP, Global Threat Intelligence

Inside Akira’s SonicWall Campaign: Darktrace’s Detection and Response

Emily Megan Lim

ShadowV2: An emerging DDoS for hire botnet

Threat Researcher

SEO Poisoning and Fake PuTTY sites: Darktrace’s Investigation into the Oyster backdoor

Christina Kreza

The Benefits of Bringing Together Network and Email Security

Senior Product Marketing Manager

From PowerShell to Payload: Darktrace’s Detection of a Novel Cryptomining Malware

From Exploit to Escalation: Tracking and Containing a Real-World Fortinet SSL-VPN Attack

Ivanti Under Siege: Investigating the Ivanti Endpoint Manager Mobile Vulnerabilities (CVE-2025-4427 & CVE-2025-4428)

Nahisha Nobregas

2025 Cyber Threat Landscape: Darktrace’s Mid-Year Review

Global Threat Research Operations Lead

Auto-Color Backdoor: How Darktrace Thwarted a Stealthy Linux Intrusion

Untangling the web: Darktrace’s investigation of Scattered Spider’s evolving tactics

Global Threat Research Operations Lead

Patch and Persist: Darktrace’s Detection of Blind Eagle (APT-C-36)

Charlotte Thompson

Tracking CVE-2025-31324: Darktrace’s detection of SAP Netweaver exploitation before and after disclosure

Principal Cyber Analyst

Customer Case Study: Leading Petrochemical Manufacturer

The Darktrace Community

Unpacking ClickFix: Darktrace’s detection of a prolific social engineering tactic

Darktrace Recognized as a Leader in the 2025 Gartner® Magic Quadrant™ for Network Detection and Response

Senior Product Marketing Manager

PumaBot: Novel Botnet Targeting IoT Surveillance Devices

Malware Research Lead

Defending the Frontlines: Proactive Cybersecurity in Local Government

The Darktrace Community

Catching a RAT: How Darktrace Neutralized AsyncRAT

Anomaly-Based Threat Hunting: Darktrace's Approach in Action

Nathaniel Jones

SVP, Global Threat Intelligence

SocGholish: From loader and C2 activity to RansomHub deployment

Christina Kreza

Boosting Security with Azure Virtual Network TAP Traffic Mirroring

Senior Director of Product

Your Vendors, Your Risk: Rethinking Third-Party Security in the Age of Supply Chain Attacks

How NDR and Secure Access Service Edge (SASE) Work Together to Achieve Network Security Outcomes

Senior Product Marketing Manager

Obfuscation Overdrive: Next-Gen Cryptojacking with Layers

Threat Researcher

The Importance of NDR in Resilient XDR

Nathaniel Jones

SVP, Global Threat Intelligence

Cyberhaven Supply Chain Attack: Exploiting Browser Extensions

Rushanth Ramanathan

Darktrace Releases Annual 2024 Threat Insights

The Darktrace Threat Research Team

Defending Against Living-off-the-Land Attacks: Anomaly Detection in Action

Alexandra Sentenac

RansomHub Revisited: New Front-Runner in the Ransomware-as-a-Service Marketplace

Maria Geronikolou

Reimagining Your SOC: Unlocking a Proactive State of Security

RansomHub Ransomware: Darktrace’s Investigation of the Newest Tool in ShadowSyndicate's Arsenal

Senior Cyber Analyst and Deputy Analyst Team Lead, Singapore

Reimagining Your SOC: How to Shift Away From Reactive Network Security

Senior Product Marketing Manager

Cleo File Transfer Vulnerability: Patch Pitfalls and Darktrace’s Detection of Post-Exploitation Activities

Maria Geronikolou

Company Shuts Down Cyber-attacks with “Flawless” Detection and Response from Darktrace

The Darktrace Community

Darktrace’s view on Operation Lunar Peek: Exploitation of Palo Alto firewall devices (CVE 2024-0012 and 2024-9474)

Senior Cyber Analyst

Darktrace is Positioned as a Leader in the IDC MarketScape: Worldwide Network Detection and Response 2024 Vendor Assessment

Senior Product Marketing Manager

Darktrace Leading the Future of Network Detection and Response With Recognition from KuppingerCole

Tactics Behind the Royal and Blacksuit Ransomware

Principal Cyber Analyst

Post-Exploitation Activities on Fortinet Devices: A Network-Based Analysis

Senior Cyber Analyst

How Triada Affects Banking and Communication Apps

From Call to Compromise: Darktrace’s Response to a Vishing-Induced Network Attack

Rushanth Ramanathan

FortiClient EMS Exploited: Attack Chain & Post Exploitation Tactics

Emily Megan Lim

Decrypting the Matrix: How Darktrace Uncovered a KOK08 Ransomware Attack

Christina Kreza

How Darktrace Detects TeamCity Exploitation Activity

Product Manager and Cyber Analyst

Understanding the WarmCookie Backdoor Threat

Investigating the Adaptive Jupyter Information Stealer

Nahisha Nobregas

A Busy Agenda: Darktrace's Detection of Qilin Ransomware as a Service Operator

Alexandra Sentenac

Post-Exploitation Activities on PAN-OS Devices: A Network-Based Analysis

Senior Cyber Analyst

Darktrace Investigation Into Medusa Ransomware

Maria Geronikolou

Uncovering the Sysrv-Hello Crypto-Jacking Bonet

Strategies to Prolong Quantum Ransomware Attacks

Cyber Security Analyst

Unveiling ViperSoftX: A Darktrace Investigation

How Vidar Malware Spreads via Malvertising on Google

Roberto Martinez

Devalyst, Threat Researcher

Darktrace’s Detection of a Hive Ransomware-as-Service

Emily Megan Lim

Post-Exploitation Activities of Ivanti CS/PS Appliances

Specialist Security Researcher

The Rise of MaaS & Lumma Info Stealer

Emily Megan Lim

How Raccoon Stealer v2 Infects Systems

Specialist Security Researcher

The Price of Admission: Countering Stolen Credentials with Darktrace

Charlotte Thompson

[Part 1] Analysis of a Raccoon Stealer v1 Infection

SOC Shift Supervisor

What Are the Early Signs of a Ransomware Attack?

Darktrace's Investigation of Raspberry Robin Worm

Alexandra Sentenac

What are Botnets and How Darktrace Uncovers Them

Senior Cyber Analyst

Sliver C2: How Darktrace Provided a Sliver of Hope

Natalia Sánchez Rocafort

Cyber Security Analyst

Darktrace's Detection of Ransomware & Syssphinx

Senior Cyber Analyst

Securing Patient Data at Cullman Regional Medical Center

Executive Director of IT, Cullman Regional Medical Center (Guest Contributor)

How Darktrace Triumphed Over MyKings Botnet

Oluwatosin Aturaka

Analyst Team Lead, Cambridge