Unit 42 - Latest Cybersecurity Research

<!doctype html> <html lang="en-US"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="profile" href="https://gmpg.org/xfn/11"> <link rel="preconnect" href="https://www.paloaltonetworks.com"> <link rel="preconnect" href="https://cdn.cookielaw.org"> <link rel="preconnect" href="https://fonts.googleapis.com">  <script type="text/javascript"> var main_site_url = 'https://www.paloaltonetworks.com'; var maindomain_lang = 'https://www.paloaltonetworks.com'; function getParameterByName(name, url) { if(url == null){ url = window.location.href; } name = name.replace(/[\[\]]/g, '\\$&'); var regex = new RegExp('[?&]' + name + '(=([^&#]*)|&|#|$)'), results = regex.exec(url); if (!results) return null; if (!results[2]) return ''; return decodeURIComponent(results[2].replace(/\+/g, ' ')); } var container_q = getParameterByName('container'); var d_lang = 'en'; </script> <link rel="preload" href="https://www.paloaltonetworks.com/etc.clientlibs/panClean/components/mainNavigationComp/clientlibs/panClean/criticalTop.min.css" as="style" onload="this.onload=null;this.rel='stylesheet'"> <noscript><link rel="stylesheet" href="https://www.paloaltonetworks.com/etc.clientlibs/panClean/components/mainNavigationComp/clientlibs/panClean/criticalTop.min.css"></noscript> <link rel="preload" href="https://www.paloaltonetworks.com/etc.clientlibs/panClean/components/mainNavigationComp/clientlibs/panClean/criticalTopProductNav.min.css" as="style" onload="this.onload=null;this.rel='stylesheet'"> <noscript><link rel="stylesheet" href="https://www.paloaltonetworks.com/etc.clientlibs/panClean/components/mainNavigationComp/clientlibs/panClean/criticalTopProductNav.min.css"></noscript> <link rel="preload" href="https://www.paloaltonetworks.com/etc.clientlibs/panClean/components/mainNavigationComp/clientlibs/panClean/deferedProductNav.min.css" as="style" onload="this.onload=null;this.rel='stylesheet'"> <noscript><link rel="stylesheet" href="https://www.paloaltonetworks.com/etc.clientlibs/panClean/components/mainNavigationComp/clientlibs/panClean/deferedProductNav.min.css"></noscript> <meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' /> <style>img:is([sizes="auto" i], [sizes^="auto," i]) { contain-intrinsic-size: 3000px 1500px }</style> <link rel="alternate" hreflang="en" href="https://unit42.paloaltonetworks.com/" /> <link rel="alternate" hreflang="ja" href="https://unit42.paloaltonetworks.jp/" /> <link rel="alternate" hreflang="x-default" href="https://unit42.paloaltonetworks.com/" />  <title>Unit 42 - Latest Cybersecurity Research | Palo Alto Networks</title> <meta name="description" content="Unit 42 brings together world-renowned threat researchers, incident responders and security consultants to create an intelligence-driven, response-ready organization that's passionate about helping you proactively manage cyber risk." /> <link rel="canonical" href="https://unit42.paloaltonetworks.com/" /> <meta property="og:locale" content="en_US" /> <meta property="og:type" content="website" /> <meta property="og:title" content="Unit 42 - Latest Cyber Security Research | Palo Alto Networks" /> <meta property="og:description" content="Unit 42 brings together world-renowned threat researchers, incident responders and security consultants to create an intelligence-driven, response-ready organization that's passionate about helping you proactively manage cyber risk." /> <meta property="og:url" content="https://unit42.paloaltonetworks.com/" /> <meta property="og:site_name" content="Unit 42" /> <meta property="article:modified_time" content="2025-01-27T08:33:30+00:00" /> <meta name="twitter:card" content="summary_large_image" />  <link rel="alternate" type="application/rss+xml" title="Unit 42 » Feed" href="https://unit42.paloaltonetworks.com/feed/" /> <link rel="alternate" type="application/rss+xml" title="Unit 42 » Comments Feed" href="https://unit42.paloaltonetworks.com/comments/feed/" /> <script type="text/javascript"> var globalConfig = {}; var webData = {}; webData.channel = "unit42"; webData.property = "unit42.paloaltonetworks.com"; webData.language = "en_us"; webData.pageType = "blogs"; webData.pageName = "unit42"; webData.pageURL = "https://unit42.paloaltonetworks.com"; webData.resourceAssetID = "c7221bce58e1f574978947aad13cc8c8"; </script> <script type="text/javascript"> var globalConfig = {}; globalConfig.buildName = "UniqueResourceAssetsID_DEC022022"; </script> <meta property="og:likes" content="0"/> <meta property="og:readtime" content="< 1"/> <meta property="og:views" content="0"/> <meta property="og:date_created" content="January 22, 2019 at 11:42 PM"/> <meta property="og:post_length" content="0"/> <meta property="og:author" content="elegance"/> <meta property="og:authorlink" content="https://unit42.paloaltonetworks.com/author/elegance/"/> <meta property="og:author_image_link" content="https://secure.gravatar.com/avatar/a9cac23dcb212dbb6e710f53244d2996?s=72&d=wp_user_avatar&r=g"/> <script type="application/ld+json">[{"@context":"https:\/\/schema.org\/","@type":"WebSite","url":"https:\/\/unit42.paloaltonetworks.com","potentialAction":{"@type":"SearchAction","target":"https:\/\/unit42.paloaltonetworks.com\/?search_field={search_term_string}","query-input":"required name=search_term_string"}},{"@context":"https:\/\/schema.org","@type":"Organization","address":{"@type":"PostalAddress","addressLocality":"Santa Clara","addressRegion":"CA","postalCode":"95054","streetAddress":"3000 Tannery Way"},"email":"mops@paloaltonetworks.com","name":"Unit 42","@id":"https:\/\/www.paloaltonetworks.com\/#panworg","telephone":"866-320-4788"}]</script><style id='co-authors-plus-coauthors-style-inline-css'> .wp-block-co-authors-plus-coauthors.is-layout-flow [class*=wp-block-co-authors-plus]{display:inline} </style> <style id='co-authors-plus-avatar-style-inline-css'> .wp-block-co-authors-plus-avatar :where(img){height:auto;max-width:100%;vertical-align:bottom}.wp-block-co-authors-plus-coauthors.is-layout-flow .wp-block-co-authors-plus-avatar :where(img){vertical-align:middle}.wp-block-co-authors-plus-avatar:is(.alignleft,.alignright){display:table}.wp-block-co-authors-plus-avatar.aligncenter{display:table;margin-inline:auto} </style> <style id='co-authors-plus-image-style-inline-css'> .wp-block-co-authors-plus-image{margin-bottom:0}.wp-block-co-authors-plus-image :where(img){height:auto;max-width:100%;vertical-align:bottom}.wp-block-co-authors-plus-coauthors.is-layout-flow .wp-block-co-authors-plus-image :where(img){vertical-align:middle}.wp-block-co-authors-plus-image:is(.alignfull,.alignwide) :where(img){width:100%}.wp-block-co-authors-plus-image:is(.alignleft,.alignright){display:table}.wp-block-co-authors-plus-image.aligncenter{display:table;margin-inline:auto} </style> <style id='safe-svg-svg-icon-style-inline-css'> .safe-svg-cover{text-align:center}.safe-svg-cover .safe-svg-inside{display:inline-block;max-width:100%}.safe-svg-cover svg{height:100%;max-height:100%;max-width:100%;width:100%} </style> <style id='classic-theme-styles-inline-css'> /*! This file is auto-generated */ .wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decoration:none;padding:calc(.667em + 2px) calc(1.333em + 2px);font-size:1.125em}.wp-block-file__button{background:#32373c;color:#fff;text-decoration:none} </style> <style id='global-styles-inline-css'> :root{--wp--preset--aspect-ratio--square: 1;--wp--preset--aspect-ratio--4-3: 4/3;--wp--preset--aspect-ratio--3-4: 3/4;--wp--preset--aspect-ratio--3-2: 3/2;--wp--preset--aspect-ratio--2-3: 2/3;--wp--preset--aspect-ratio--16-9: 16/9;--wp--preset--aspect-ratio--9-16: 9/16;--wp--preset--color--black: #000000;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf2e2e;--wp--preset--color--luminous-vivid-orange: #ff6900;--wp--preset--color--luminous-vivid-amber: #fcb900;--wp--preset--color--light-green-cyan: #7bdcb5;--wp--preset--color--vivid-green-cyan: #00d084;--wp--preset--color--pale-cyan-blue: #8ed1fc;--wp--preset--color--vivid-cyan-blue: #0693e3;--wp--preset--color--vivid-purple: #9b51e0;--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple: linear-gradient(135deg,rgba(6,147,227,1) 0%,rgb(155,81,224) 100%);--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan: linear-gradient(135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange: linear-gradient(135deg,rgba(252,185,0,1) 0%,rgba(255,105,0,1) 100%);--wp--preset--gradient--luminous-vivid-orange-to-vivid-red: linear-gradient(135deg,rgba(255,105,0,1) 0%,rgb(207,46,46) 100%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);--wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220) 0%,rgb(151,120,209) 20%,rgb(207,42,186) 40%,rgb(238,44,130) 60%,rgb(251,105,98) 80%,rgb(254,248,76) 100%);--wp--preset--gradient--blush-light-purple: linear-gradient(135deg,rgb(255,206,236) 0%,rgb(152,150,240) 100%);--wp--preset--gradient--blush-bordeaux: linear-gradient(135deg,rgb(254,205,165) 0%,rgb(254,45,45) 50%,rgb(107,0,62) 100%);--wp--preset--gradient--luminous-dusk: linear-gradient(135deg,rgb(255,203,112) 0%,rgb(199,81,192) 50%,rgb(65,88,208) 100%);--wp--preset--gradient--pale-ocean: linear-gradient(135deg,rgb(255,245,203) 0%,rgb(182,227,212) 50%,rgb(51,167,181) 100%);--wp--preset--gradient--electric-grass: linear-gradient(135deg,rgb(202,248,128) 0%,rgb(113,206,126) 100%);--wp--preset--gradient--midnight: linear-gradient(135deg,rgb(2,3,129) 0%,rgb(40,116,252) 100%);--wp--preset--font-size--small: 13px;--wp--preset--font-size--medium: 20px;--wp--preset--font-size--large: 36px;--wp--preset--font-size--x-large: 42px;--wp--preset--spacing--20: 0.44rem;--wp--preset--spacing--30: 0.67rem;--wp--preset--spacing--40: 1rem;--wp--preset--spacing--50: 1.5rem;--wp--preset--spacing--60: 2.25rem;--wp--preset--spacing--70: 3.38rem;--wp--preset--spacing--80: 5.06rem;--wp--preset--shadow--natural: 6px 6px 9px rgba(0, 0, 0, 0.2);--wp--preset--shadow--deep: 12px 12px 50px rgba(0, 0, 0, 0.4);--wp--preset--shadow--sharp: 6px 6px 0px rgba(0, 0, 0, 0.2);--wp--preset--shadow--outlined: 6px 6px 0px -3px rgba(255, 255, 255, 1), 6px 6px rgba(0, 0, 0, 1);--wp--preset--shadow--crisp: 6px 6px 0px rgba(0, 0, 0, 1);}:where(.is-layout-flex){gap: 0.5em;}:where(.is-layout-grid){gap: 0.5em;}body .is-layout-flex{display: flex;}.is-layout-flex{flex-wrap: wrap;align-items: center;}.is-layout-flex > :is(*, div){margin: 0;}body .is-layout-grid{display: grid;}.is-layout-grid > :is(*, div){margin: 0;}:where(.wp-block-columns.is-layout-flex){gap: 2em;}:where(.wp-block-columns.is-layout-grid){gap: 2em;}:where(.wp-block-post-template.is-layout-flex){gap: 1.25em;}:where(.wp-block-post-template.is-layout-grid){gap: 1.25em;}.has-black-color{color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-color{color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-color{color: var(--wp--preset--color--white) !important;}.has-pale-pink-color{color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-color{color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-color{color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-color{color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-color{color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-color{color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-color{color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-color{color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-color{color: var(--wp--preset--color--vivid-purple) !important;}.has-black-background-color{background-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-background-color{background-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-background-color{background-color: var(--wp--preset--color--white) !important;}.has-pale-pink-background-color{background-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-background-color{background-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-background-color{background-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-background-color{background-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-background-color{background-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-background-color{background-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-background-color{background-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-background-color{background-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-background-color{background-color: var(--wp--preset--color--vivid-purple) !important;}.has-black-border-color{border-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-border-color{border-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-border-color{border-color: var(--wp--preset--color--white) !important;}.has-pale-pink-border-color{border-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-border-color{border-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-border-color{border-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-border-color{border-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-border-color{border-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-border-color{border-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-border-color{border-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-border-color{border-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-border-color{border-color: var(--wp--preset--color--vivid-purple) !important;}.has-vivid-cyan-blue-to-vivid-purple-gradient-background{background: var(--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple) !important;}.has-light-green-cyan-to-vivid-green-cyan-gradient-background{background: var(--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan) !important;}.has-luminous-vivid-amber-to-luminous-vivid-orange-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange) !important;}.has-luminous-vivid-orange-to-vivid-red-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-orange-to-vivid-red) !important;}.has-very-light-gray-to-cyan-bluish-gray-gradient-background{background: var(--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray) !important;}.has-cool-to-warm-spectrum-gradient-background{background: var(--wp--preset--gradient--cool-to-warm-spectrum) !important;}.has-blush-light-purple-gradient-background{background: var(--wp--preset--gradient--blush-light-purple) !important;}.has-blush-bordeaux-gradient-background{background: var(--wp--preset--gradient--blush-bordeaux) !important;}.has-luminous-dusk-gradient-background{background: var(--wp--preset--gradient--luminous-dusk) !important;}.has-pale-ocean-gradient-background{background: var(--wp--preset--gradient--pale-ocean) !important;}.has-electric-grass-gradient-background{background: var(--wp--preset--gradient--electric-grass) !important;}.has-midnight-gradient-background{background: var(--wp--preset--gradient--midnight) !important;}.has-small-font-size{font-size: var(--wp--preset--font-size--small) !important;}.has-medium-font-size{font-size: var(--wp--preset--font-size--medium) !important;}.has-large-font-size{font-size: var(--wp--preset--font-size--large) !important;}.has-x-large-font-size{font-size: var(--wp--preset--font-size--x-large) !important;} :where(.wp-block-post-template.is-layout-flex){gap: 1.25em;}:where(.wp-block-post-template.is-layout-grid){gap: 1.25em;} :where(.wp-block-columns.is-layout-flex){gap: 2em;}:where(.wp-block-columns.is-layout-grid){gap: 2em;} :root :where(.wp-block-pullquote){font-size: 1.5em;line-height: 1.6;} </style> <link rel='stylesheet' id='post-views-counter-frontend-css' href='https://unit42.paloaltonetworks.com/wp-content/plugins/post-views-counter/css/frontend.min.css?ver=1.4.8' media='all' /> <link rel='stylesheet' id='wpml-legacy-post-translations-0-css' href='https://unit42.paloaltonetworks.com/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-post-translations/style.min.css?ver=1' media='all' /> <link rel='stylesheet' id='unit42-v6-style-css' href='https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/style.css?ver=1.0.0' media='all' /> <link rel='stylesheet' id='unit42-v6-head-styles-css' href='https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/css/head-styles.css?ver=1.0.0' media='all' /> <link rel='stylesheet' id='unit42-v5-custom-styles-css' href='https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/css/main.css?ver=1.0.0' media='all' /> <link rel='stylesheet' id='unit42-v6-plugin-styles-css' href='https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/css/plugin.css?ver=1.0.0' media='all' /> <link rel='stylesheet' id='unit42-v6-custom-styles-css' href='https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/css/main-redesign.css?ver=1.0.0' media='all' /> <link rel='stylesheet' id='like-dislike-css' href='https://unit42.paloaltonetworks.com/wp-content/plugins/like-dislike-counter-for-posts-pages-and-comments/css/ldc-lite.css?ver=1.0.0' media='all' /> <script src="https://unit42.paloaltonetworks.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1" id="jquery-core-js"></script> <script src="https://unit42.paloaltonetworks.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1" id="jquery-migrate-js"></script> <script id="crayon_js-js-extra"> var CrayonSyntaxSettings = {"version":"_2.7.2_beta","is_admin":"0","ajaxurl":"https:\/\/unit42.paloaltonetworks.com\/wp-admin\/admin-ajax.php","prefix":"crayon-","setting":"crayon-setting","selected":"crayon-setting-selected","changed":"crayon-setting-changed","special":"crayon-setting-special","orig_value":"data-orig-value","debug":""}; var CrayonSyntaxStrings = {"copy":"Press %s to Copy, %s to Paste","minimize":"Click To Expand Code"}; </script> <script src="https://unit42.paloaltonetworks.com/wp-content/plugins/crayon-syntax-highlighter/js/min/crayon.min.js?ver=_2.7.2_beta" id="crayon_js-js"></script> <script id="wpml-xdomain-data-js-extra"> var wpml_xdomain_data = {"css_selector":"wpml-ls-item","ajax_url":"https:\/\/unit42.paloaltonetworks.com\/wp-admin\/admin-ajax.php","current_lang":"en","_nonce":"56b6a76a4e"}; </script> <script src="https://unit42.paloaltonetworks.com/wp-content/plugins/sitepress-multilingual-cms/res/js/xdomain-data.js?ver=4.6.15" id="wpml-xdomain-data-js" defer data-wp-strategy="defer"></script> <link rel="https://api.w.org/" href="https://unit42.paloaltonetworks.com/wp-json/" /><link rel="alternate" title="JSON" type="application/json" href="https://unit42.paloaltonetworks.com/wp-json/wp/v2/pages/96222" /><link rel="EditURI" type="application/rsd+xml" title="RSD" href="https://unit42.paloaltonetworks.com/xmlrpc.php?rsd" /> <meta name="generator" content="WordPress 6.7.1" /> <link rel='shortlink' href='https://unit42.paloaltonetworks.com/' /> <link rel="alternate" title="oEmbed (JSON)" type="application/json+oembed" href="https://unit42.paloaltonetworks.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Funit42.paloaltonetworks.com%2F" /> <link rel="alternate" title="oEmbed (XML)" type="text/xml+oembed" href="https://unit42.paloaltonetworks.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Funit42.paloaltonetworks.com%2F&format=xml" /> <meta name="generator" content="WPML ver:4.6.15 stt:1,28;" /> <meta name="google-site-verification" content="zHZtYOWm9hm4SZgsH7wqiYcOwmsAsxDUDU4UD1QxB40" /><style>#wpdevart_lb_overlay{background-color:#000000;} #wpdevart_lb_overlay.wpdevart_opacity{opacity:0.8 !important;} #wpdevart_lb_main_desc{ -webkit-transition: opacity 0.3s ease; -moz-transition: opacity 0.3s ease; -o-transition: opacity 0.3s ease; transition: opacity 0.3s ease;} #wpdevart_lb_information_content{ -webkit-transition: opacity 0.3s ease; -moz-transition: opacity 0.3s ease; -o-transition: opacity 0.3s ease; transition: opacity 0.3s ease;} #wpdevart_lb_information_content{ width:100%; padding-top:0px; padding-bottom:0px; } #wpdevart_info_counter_of_imgs{ display: inline-block; padding-left:15px; padding-right:4px; font-size:20px; color:#000000; } #wpdevart_info_caption{ display: inline-block; padding-left:15px; padding-right:4px; font-size:20px; color:#000000; } #wpdevart_info_title{ display: inline-block; padding-left:5px; padding-right:5px; font-size:15px; color:#000000; } @-webkit-keyframes rotate { to {-webkit-transform: rotate(360deg);} from {-webkit-transform: rotate(0deg);} } @keyframes rotate { to {transform: rotate(360deg);} from {transform: rotate(0deg);} } #wpdevart_lb_loading_img,#wpdevart_lb_loading_img_first{ -webkit-animation: rotate 2s linear infinite; animation: rotate 2s linear infinite; } </style> <link rel="icon" href="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-Unit42-180x180-1.png" sizes="32x32" /> <link rel="icon" href="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-Unit42-180x180-1.png" sizes="192x192" /> <link rel="apple-touch-icon" href="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-Unit42-180x180-1.png" /> <meta name="msapplication-TileImage" content="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-Unit42-180x180-1.png" /> <script>var $ = jQuery;</script> <script type="text/javascript"> ;(function(win, doc, style, timeout) { var STYLE_ID = 'at-body-style'; function getParent() { return doc.getElementsByTagName('head')[0]; } function addStyle(parent, id, def) { if (!parent) { return; } var style = doc.createElement('style'); style.id = id; style.innerHTML = def; parent.appendChild(style); } function removeStyle(parent, id) { if (!parent) { return; } var style = doc.getElementById(id); if (!style) { return; } parent.removeChild(style); } addStyle(getParent(), STYLE_ID, style); setTimeout(function() { removeStyle(getParent(), STYLE_ID); }, timeout); }(window, document, "body {visibility:hidden !important}", 3000)); </script> <script src="https://assets.adobedtm.com/9273d4aedcd2/0d76ae0322d7/launch-425c423d843b.min.js" async></script> <script type="text/javascript" src="https://www.paloaltonetworks.com/content/dam/pan/en_US/includes/attribution.js"></script> <script type="text/javascript"> var isIE11 = !!navigator.userAgent.match(/Trident.*rv\:11\./); if(isIE11){ var polyfill = 'https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/scripts/polyfill.min.js'; document.write('<script type="text/javascript" src="'+polyfill+'">\x3C/script>'); } /** * String.prototype.replaceAll() polyfill * https://gomakethings.com/how-to-replace-a-section-of-a-string-with-another-one-with-vanilla-js/ * @author Chris Ferdinandi * @license MIT */ if (!String.prototype.replaceAll) { String.prototype.replaceAll = function(str, newStr){ // If a regex pattern if (Object.prototype.toString.call(str).toLowerCase() === '[object regexp]') { return this.replace(str, newStr); } // If a string return this.replace(new RegExp(str, 'g'), newStr); }; } /*! lozad.js - v1.16.0 - 2020-09-06 */ !function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):t.lozad=e()}(this,function(){"use strict"; /** * Detect IE browser * @const {boolean} * @private */var g="undefined"!=typeof document&&document.documentMode,f={rootMargin:"0px",threshold:0,load:function(t){if("picture"===t.nodeName.toLowerCase()){var e=t.querySelector("img"),r=!1;null===e&&(e=document.createElement("img"),r=!0),g&&t.getAttribute("data-iesrc")&&(e.src=t.getAttribute("data-iesrc")),t.getAttribute("data-alt")&&(e.alt=t.getAttribute("data-alt")),r&&t.append(e)}if("video"===t.nodeName.toLowerCase()&&!t.getAttribute("data-src")&&t.children){for(var a=t.children,o=void 0,i=0;i<=a.length-1;i++)(o=a[i].getAttribute("data-src"))&&(a[i].src=o);t.load()}t.getAttribute("data-poster")&&(t.poster=t.getAttribute("data-poster")),t.getAttribute("data-src")&&(t.src=t.getAttribute("data-src")),t.getAttribute("data-srcset")&&t.setAttribute("srcset",t.getAttribute("data-srcset"));var n=",";if(t.getAttribute("data-background-delimiter")&&(n=t.getAttribute("data-background-delimiter")),t.getAttribute("data-background-image"))t.style.backgroundImage="url('"+t.getAttribute("data-background-image").split(n).join("'),url('")+"')";else if(t.getAttribute("data-background-image-set")){var d=t.getAttribute("data-background-image-set").split(n),u=d[0].substr(0,d[0].indexOf(" "))||d[0];// Substring before ... 1x u=-1===u.indexOf("url(")?"url("+u+")":u,1===d.length?t.style.backgroundImage=u:t.setAttribute("style",(t.getAttribute("style")||"")+"background-image: "+u+"; background-image: -webkit-image-set("+d+"); background-image: image-set("+d+")")}t.getAttribute("data-toggle-class")&&t.classList.toggle(t.getAttribute("data-toggle-class"))},loaded:function(){}};function A(t){t.setAttribute("data-loaded",!0)}var m=function(t){return"true"===t.getAttribute("data-loaded")},v=function(t){var e=1<arguments.length&&void 0!==arguments[1]?arguments[1]:document;return t instanceof Element?[t]:t instanceof NodeList?t:e.querySelectorAll(t)};return function(){var r,a,o=0<arguments.length&&void 0!==arguments[0]?arguments[0]:".lozad",t=1<arguments.length&&void 0!==arguments[1]?arguments[1]:{},e=Object.assign({},f,t),i=e.root,n=e.rootMargin,d=e.threshold,u=e.load,g=e.loaded,s=void 0;"undefined"!=typeof window&&window.IntersectionObserver&&(s=new IntersectionObserver((r=u,a=g,function(t,e){t.forEach(function(t){(0<t.intersectionRatio||t.isIntersecting)&&(e.unobserve(t.target),m(t.target)||(r(t.target),A(t.target),a(t.target)))})}),{root:i,rootMargin:n,threshold:d}));for(var c,l=v(o,i),b=0;b<l.length;b++)(c=l[b]).getAttribute("data-placeholder-background")&&(c.style.background=c.getAttribute("data-placeholder-background"));return{observe:function(){for(var t=v(o,i),e=0;e<t.length;e++)m(t[e])||(s?s.observe(t[e]):(u(t[e]),A(t[e]),g(t[e])))},triggerLoad:function(t){m(t)||(u(t),A(t),g(t))},observer:s}}}); </script>   </head> <body class="home page-template page-template-page-templates page-template-template-home page-template-page-templatestemplate-home-php page page-id-96222 no-sidebar"> <header class="haeder py-15 position-relative z-index-2" style="display: none;"> <div class="container px-sm-30 px-35"> <div class="row"> <div class="first-logo col-sm-auto col-6 mb-sm-0 mb-40 text-sm-center order-1"> <a href="https://www.paloaltonetworks.com/"> <img src="/wp-content/uploads/2021/07/PANW_Parent.png" width="140px" alt="Logo" /> </a> </div> <div class="col-sm-auto col-6 text-sm-center order-sm-2 order-4 second-logo-unit"> <a href="https://unit42.paloaltonetworks.com/"> <img src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/unit42-logo-white.svg" class="attachment-full size-full" alt="Unit42 Logo" width="150" height="35"/> </a> </div> <div class="col-auto d-sm-none ml-auto mb-40 order-2"> <button class="btn__search" data-toggle="collapse" data-target="#search" aria-label="search"><i class="ui ui-1"></i></button> </div> <div id="search" class="collapse d-sm-block col-sm-auto col-12 ml-auto order-3"> <div class="pt-sm-0 pt-20 pb-sm-0 pb-40 mt-sm-0 mt-n30"> <input type="search" placeholder="Search Unit 42" id="innerSearch" class="header__search" value="" required aria-label="Inner Search"> </div> </div> <div class="col-auto d-sm-none d-flex ml-auto align-items-center order-5"> <button class="btn__menu rounded" data-toggle="collapse" data-target="#navigation">Menu</button> </div> </div> </div> </header> <nav id="navigation" class="site-nav collapse d-sm-block pb-20 mt-sm-10" style="display: none!important;"> <div class="container px-sm-30"> <ul id="menu-primary-navigation" class="main-menu d-sm-flex font-weight-medium"><li id="menu-item-97290" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-97290"><a href="https://unit42.paloaltonetworks.com/tools/">Tools</a></li> <li id="menu-item-41" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-41"><a href="https://unit42.paloaltonetworks.com/atoms/">ATOMs</a></li> <li id="menu-item-119884" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-119884"><a target="_blank" href="https://www.paloaltonetworks.com/unit42">Security Consulting</a></li> <li id="menu-item-81229" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-81229"><a href="https://unit42.paloaltonetworks.com/about-unit-42/">About Us</a></li> <li id="menu-item-121229" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-121229"><a href="https://start.paloaltonetworks.com/contact-unit42.html"><b style="color:#C84727">Under Attack?</b></a></li> </ul> </div> </nav> <div class="panClean pan-template-home" id="main-nav-menu-cont" style="display:none;"> <div class="cleanHeader mainNavigationComp baseComponent parbase"> <div class="productNav2021Component dark default" id="PAN_2021_NAV_ASYNC"> </div> </div> <div class="cleanTopHtml htmlComp baseComponent parbase"><div class="base-component-spacer spacer-none "></div> </div> </div>  <script type="text/javascript"> function getCookie(cname) { var name = cname + "="; var decodedCookie = decodeURIComponent(document.cookie); var ca = decodedCookie.split(';'); for(var i = 0; i <ca.length; i++) { var c = ca[i]; while (c.charAt(0) == ' ') { c = c.substring(1); } if (c.indexOf(name) == 0) { return c.substring(name.length, c.length); } } return ""; } var referer = "";//sessionStorage.container; var pcontainer = sessionStorage.getItem("container"); var searchResultsPagePath = ""; if(((pcontainer) && pcontainer.indexOf('Prisma')!=-1)){ referer = 'Prisma' ; } else if(((pcontainer) && pcontainer.indexOf('Cortex')!=-1)){ if( pcontainer.indexOf('CloudCortex') != -1){ referer = 'CloudCortex' ; } else{ referer = 'Cortex' ; } } else if(((pcontainer) && pcontainer.indexOf('Sase')!=-1)){ referer = 'Sase' ; } else if(((pcontainer) && pcontainer.indexOf('Unit')!=-1)){ referer = 'Unit' ; } else if(((pcontainer) && pcontainer.indexOf('Ngfw')!=-1)){ referer = 'Ngfw' ; } var fromRef = document.referrer; var nContainer = getCookie("navContainer"); if(nContainer){//If user is coming from main site, we need to reset the container if(fromRef && fromRef.indexOf("prismacloud.io")!=-1){ referer = 'Prisma' ; sessionStorage.setItem("container","Prisma"); } else if(fromRef.indexOf("paloaltonetworks.com")!=-1 || fromRef.indexOf("paloaltonetworks.jp")!=-1 ){ if(nContainer.indexOf('Prisma') != -1){ referer = 'Prisma' ; sessionStorage.setItem("container","Prisma"); } if(nContainer.indexOf('Cortex') != -1){ if( nContainer.indexOf('CloudCortex') != -1){ referer = 'CloudCortex'; sessionStorage.setItem("container","CloudCortex"); } else{ referer = 'Cortex'; sessionStorage.setItem("container","Cortex"); } } if(nContainer.indexOf('Sase') != -1){ referer = 'Sase' ; sessionStorage.setItem("container","Sase"); } if(nContainer.indexOf('Unit') != -1){ referer = 'Unit' ; sessionStorage.setItem("container","Unit"); } if(nContainer.indexOf('Ngfw') != -1){ referer = 'Ngfw' ; sessionStorage.setItem("container","Ngfw"); } document.cookie = 'navContainer=; path=/; domain=.paloaltonetworks.com; expires=' + new Date(0).toUTCString(); } } if(referer != "Prisma" && referer != "CloudCortex" && referer != "Cortex" && referer != "Sase" && referer != "Unit" && referer != "Ngfw") { referer = 'Unit' ; sessionStorage.setItem("container","Unit"); } function callMainSitePrismaNavHTML(){ var referrer_domain = 'https://www.paloaltonetworks.com'; sessionStorage.setItem("domain",referrer_domain); if(referer == 'Prisma'){ var menu_url = referrer_domain+'/_jcr_content/globals/cleanHeaderPrisma.prismaRenderer.html'; searchResultsPagePath = referrer_domain+"/search/prismasearch"; } if(referer == 'CloudCortex'){ var menu_url = 'https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/unit-nav-renderer.php?type=cortexcloud'; searchResultsPagePath = referrer_domain+"/search/cortexcloudsearch"; } if(referer == 'Cortex'){ var menu_url = referrer_domain+'/_jcr_content/globals/cleanHeaderCortex.cortexRenderer.html'; searchResultsPagePath = referrer_domain+"/search/cortexsearch"; } if(referer == 'Sase'){ var menu_url = referrer_domain+'/_jcr_content/globals/cleanHeaderSase.saseRenderer.html'; searchResultsPagePath = referrer_domain+"/search/sasesearch"; } if(referer == 'Unit'){ var menu_url = 'https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/unit-nav-renderer.php?type=unit42'; searchResultsPagePath = referrer_domain+"/content/pan/en_US/search/unit42search"; } if(referer == 'Ngfw'){ var menu_url = 'https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/ngfw-cdss-nav-renderer.php'; searchResultsPagePath = referrer_domain+"/search/ngfwcdsssearch"; } httpGet(menu_url,'menu_html'); document.getElementById('main-nav-menu-cont').removeAttribute("style"); } function addStyle(styles) { /* Create style document */ var css = document.createElement('style'); css.type = 'text/css'; if (css.styleSheet) css.styleSheet.cssText = styles; else css.appendChild(document.createTextNode(styles)); /* Append style to the tag name */ document.getElementsByTagName("head")[0].appendChild(css); } function httpGet(theUrl,req_type) { if (window.XMLHttpRequest) { // code for IE7+, Firefox, Chrome, Opera, Safari xmlhttp=new XMLHttpRequest(); } else {// code for IE6, IE5 xmlhttp=new ActiveXObject("Microsoft.XMLHTTP"); } xmlhttp.onreadystatechange=function() { if (xmlhttp.readyState==4 && xmlhttp.status==200) { if(req_type == 'menu_html'){ var nav_text = xmlhttp.responseText.replaceAll('https://static.cloud.coveo.com/searchui/v2.9159/js/CoveoJsSearch.Lazy.min.js', ''); nav_text = nav_text.replaceAll('src="/', 'src="'+maindomain_lang+'/'); nav_text = nav_text.replaceAll("'/content", "'"+maindomain_lang+"/content"); document.getElementById("PAN_2021_NAV_ASYNC").innerHTML = nav_text.replaceAll('href="/', 'href="'+maindomain_lang+'/'); var lozad_back = document.getElementsByClassName('lozad-background'); Array.prototype.forEach.call(lozad_back, function(el) { // Do stuff here var el_back_img_path = el.getAttribute('data-background-image'); var first_pos = el_back_img_path.indexOf("'"); var last_pos = el_back_img_path.indexOf("'",first_pos+1); el_back_img_path = el_back_img_path.substring(first_pos+1,last_pos); el.setAttribute("data-background-image",main_site_url+el_back_img_path); }); const observer_lozad = lozad('.lozad, .lozad-background'); // lazy loads elements with default selector as '.lozad' observer_lozad.observe(); } if(req_type == 'head_inline_css'){ addStyle(xmlhttp.responseText); } } } xmlhttp.open("GET", theUrl, true ); xmlhttp.send(); } if(referer == 'Prisma' || referer == 'CloudCortex' || referer == 'Cortex' || referer == 'Sase' || referer == 'Unit' || referer == 'Ngfw'){ const article = document.querySelector('#PAN_2021_NAV_ASYNC'); if(referer == 'Prisma'){ article.dataset.type = 'prisma'; $('#PAN_2021_NAV_ASYNC').removeClass('default').addClass('defaultRedesigned'); } else if(referer == 'CloudCortex'){ article.dataset.type = 'cloudcortex'; } else if(referer == 'Sase'){ article.dataset.type = 'sase'; } else if(referer == 'Unit'){ article.dataset.type = 'unit'; } else if(referer == 'Ngfw'){ article.dataset.type = 'ngfw'; } //set class to default if(referer == 'Unit' || referer == 'Ngfw'){ $('#PAN_2021_NAV_ASYNC').removeClass('default').addClass('defaultRedesigned'); } callMainSitePrismaNavHTML(); } </script>  <main class="main"> <section class="section section--overview-banner"> <div class="pa overview-banner overview-banner--shimmer shimmer"> <div class="overview-banner__wrapper"> <div class="l-container"> <div class="ob__featured-post"> <article><span></span> <div class="ob-fp__heading"><span class="h1 is-block"></span><span class="h1 is-block"></span><span class="h1 is-block"></span></div> <div class="ob-fp__paragraph"><span class="p is-block"></span><span class="p is-block"></span></div><span class="button"></span> </article> </div> </div> </div> <div class="ob__post-list"> <div class="pa l-card l-card--fp"> <div class="card-media"><span class="image"></span></div> <div class="card-content"> <div class="card-content__wrapper"><span></span><span class="p is-block"></span><span class="p is-block"></span><span class="p is-block"></span></div> </div> </div> <div class="pa l-card l-card--fp"> <div class="card-media"><span class="image"></span></div> <div class="card-content"> <div class="card-content__wrapper"><span></span><span class="p is-block"></span><span class="p is-block"></span><span class="p is-block"></span></div> </div> </div> <div class="pa l-card l-card--fp"> <div class="card-media"><span class="image"></span></div> <div class="card-content"> <div class="card-content__wrapper"><span></span><span class="p is-block"></span><span class="p is-block"></span><span class="p is-block"> </span></div> </div> </div> </div> </div> <div class="pa overview-banner"> <div class="overview-banner__wrapper"> <div class="l-container"> <div class="ob__featured-post"> <article> <picture class="featured-image"> <img width="1493" height="700" src="https://unit42.paloaltonetworks.com/wp-content/uploads/2025/02/03_Malware_Category_1920x900-1493x700.jpg" class="attachment-large size-large" alt="Pictorial representation of macOS infostealers. Laptop on a desk displaying advanced cybersecurity software interface with vibrant red graphics, in a dimly lit room." decoding="async" fetchpriority="high" srcset="https://unit42.paloaltonetworks.com/wp-content/uploads/2025/02/03_Malware_Category_1920x900-1493x700.jpg 1493w, https://unit42.paloaltonetworks.com/wp-content/uploads/2025/02/03_Malware_Category_1920x900-786x368.jpg 786w, https://unit42.paloaltonetworks.com/wp-content/uploads/2025/02/03_Malware_Category_1920x900-768x360.jpg 768w, https://unit42.paloaltonetworks.com/wp-content/uploads/2025/02/03_Malware_Category_1920x900-1536x720.jpg 1536w, https://unit42.paloaltonetworks.com/wp-content/uploads/2025/02/03_Malware_Category_1920x900.jpg 1920w" sizes="(max-width: 1493px) 100vw, 1493px" /> </picture> <div class="l-tag ">CRITICAL THREAT</div> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/threat-research/" role="link" data-page-track="true" data-page-track-value="overview:hero:Threat Research"><span class=""><img src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-threat-research.svg" alt=" category icon">Threat Research</span></a> <span class="post-pub-date"><time datetime="2025-02-04T11:00:12+00:00">February 4, 2025</time></span> <a class="fc__title" href="https://unit42.paloaltonetworks.com/macos-stealers-growing/" role="link" data-page-track="true" data-page-track-value="overview:hero:Stealers on the Rise: A Closer Look at a Growing macOS Threat"> <h1>Stealers on the Rise: A Closer Look at a Growing macOS Threat</h1> </a> <a class="fc__descr" href="https://unit42.paloaltonetworks.com/macos-stealers-growing/" title="Atomic Stealer, Poseidon Stealer and Cthulhu Stealer target macOS. We discuss their various properties and examine leverage of the AppleScript framework." role="link" data-page-track="true" data-page-track-value="overview:hero:Stealers on the Rise: A Closer Look at a Growing macOS Threat"> <p>Atomic Stealer, Poseidon Stealer and Cthulhu Stealer target macOS. We discuss their various properties and examine leverage of the AppleScript framework.</p> </a> <a class="l-btn" href="https://unit42.paloaltonetworks.com/macos-stealers-growing/" title="Read now link" role="link" data-page-track="true" data-page-track-value="overview:hero:Stealers on the Rise: A Closer Look at a Growing macOS Threat:read now"> Atomic Stealer and More <img src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/right-arrow.svg" alt="Right Arrow"> </a> </article> </div> </div> </div> <div class="ob__post-list"> <div class="ob__mobile-arrow left disabled"> <img src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/slider-right-arrow.svg" alt="Right arrow"> </div> <div class="ob__mobile-arrow"> <img src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/slider-right-arrow.svg" alt="Right arrow"> </div> <div data-page-track="true" data-cta-text="Atomic Stealer and More" data-cta-image="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/right-arrow.svg" data-card-link="https://unit42.paloaltonetworks.com/macos-stealers-growing/" data-page-track-value="overview:hero:Stealers on the Rise: A Closer Look at a Growing macOS Threat:card" class="pa l-card card--fp is-active" data-paragraph="Atomic Stealer, Poseidon Stealer and Cthulhu Stealer target macOS. We discuss their various properties and examine leverage of the AppleScript framework." > <div class="card-media " > <figure class="aspect-box" style="--aspect-ratio:180/214;"> <img width="786" height="368" src="https://unit42.paloaltonetworks.com/wp-content/uploads/2025/02/03_Malware_Category_1920x900-786x368.jpg" class="attachment-medium size-medium" alt="Pictorial representation of macOS infostealers. Laptop on a desk displaying advanced cybersecurity software interface with vibrant red graphics, in a dimly lit room." data-large-image="https://unit42.paloaltonetworks.com/wp-content/uploads/2025/02/03_Malware_Category_1920x900-1493x700.jpg" decoding="async" srcset="https://unit42.paloaltonetworks.com/wp-content/uploads/2025/02/03_Malware_Category_1920x900-786x368.jpg 786w, https://unit42.paloaltonetworks.com/wp-content/uploads/2025/02/03_Malware_Category_1920x900-1493x700.jpg 1493w, https://unit42.paloaltonetworks.com/wp-content/uploads/2025/02/03_Malware_Category_1920x900-768x360.jpg 768w, https://unit42.paloaltonetworks.com/wp-content/uploads/2025/02/03_Malware_Category_1920x900-1536x720.jpg 1536w, https://unit42.paloaltonetworks.com/wp-content/uploads/2025/02/03_Malware_Category_1920x900.jpg 1920w" sizes="(max-width: 786px) 100vw, 786px" /> </figure> </div> <div class="card-content"> <div class="card-content__wrapper"> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/threat-research/" role="link" data-page-track="true" data-page-track-value="overview:hero:Stealers on the Rise: A Closer Look at a Growing macOS Threat:Threat Research"><span class=""><img src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-threat-research.svg" alt=" category icon">Threat Research</span></a> <span class="post-pub-date"><time datetime="2025-02-04T11:00:12+00:00">February 4, 2025</time></span> <a href="https://unit42.paloaltonetworks.com/macos-stealers-growing/" class="card-title" title="Stealers on the Rise: A Closer Look at a Growing macOS Threat" role="link" data-page-track="true" data-page-track-value="overview:hero:Stealers on the Rise: A Closer Look at a Growing macOS Threat"> <h2>Stealers on the Rise: A Closer Look at a Growing macOS Threat</h2> </a> </div> </div> </div> <div data-page-track="true" data-cta-text="Investigation and Evaluation" data-cta-image="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/right-arrow.svg" data-card-link="https://unit42.paloaltonetworks.com/jailbreaking-deepseek-three-techniques/" data-page-track-value="overview:hero:Recent Jailbreaks Demonstrate Emerging Threat to DeepSeek:card" class="pa l-card card--fp " data-paragraph="Evaluation of three jailbreaking techniques on DeepSeek shows risks of generating prohibited content." > <div class="card-media " > <figure class="aspect-box" style="--aspect-ratio:180/214;"> <img width="786" height="368" src="https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/14_Overview_1920x900-786x368.jpg" class="attachment-medium size-medium" alt="Digital representation of jailbreaking DeepSeek. A dynamic, multicolored wave pattern with luminous particles, set against a dark background." data-large-image="https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/14_Overview_1920x900-1493x700.jpg" decoding="async" srcset="https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/14_Overview_1920x900-786x368.jpg 786w, https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/14_Overview_1920x900-1493x700.jpg 1493w, https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/14_Overview_1920x900-768x360.jpg 768w, https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/14_Overview_1920x900-1536x720.jpg 1536w, https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/14_Overview_1920x900.jpg 1920w" sizes="(max-width: 786px) 100vw, 786px" /> </figure> </div> <div class="card-content"> <div class="card-content__wrapper"> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/threat-research/" role="link" data-page-track="true" data-page-track-value="overview:hero:Recent Jailbreaks Demonstrate Emerging Threat to DeepSeek:Threat Research"><span class=""><img src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-threat-research.svg" alt=" category icon">Threat Research</span></a> <span class="post-pub-date"><time datetime="2025-01-30T21:30:36+00:00">January 30, 2025</time></span> <a href="https://unit42.paloaltonetworks.com/jailbreaking-deepseek-three-techniques/" class="card-title" title="Recent Jailbreaks Demonstrate Emerging Threat to DeepSeek" role="link" data-page-track="true" data-page-track-value="overview:hero:Recent Jailbreaks Demonstrate Emerging Threat to DeepSeek"> <h2>Recent Jailbreaks Demonstrate Emerging Threat to DeepSeek</h2> </a> </div> </div> </div> <div data-page-track="true" data-cta-text="A Rarely Seen Exfiltration Technique" data-cta-image="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/right-arrow.svg" data-card-link="https://unit42.paloaltonetworks.com/espionage-campaign-targets-south-asian-entities/" data-page-track-value="overview:hero:CL-STA-0048: An Espionage Operation Against High-Value Targets in South Asia:card" class="pa l-card card--fp " data-paragraph="A Chinese-linked espionage campaign targeted entities in South Asia using rare techniques like DNS exfiltration, with the aim to steal sensitive data." > <div class="card-media " > <figure class="aspect-box" style="--aspect-ratio:180/214;"> <img width="786" height="368" src="https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/01_Hactivism_Overview_1920x900-786x368.jpg" class="attachment-medium size-medium" alt="A pictorial representation of an espionage operation against high-value targets in South Asia. Digital artwork featuring an abstract blend of vibrant blue, pink, and black colors with fragments of HTML code visible, creating a dynamic and modern visual effect against a glitch effect photo of someone typing on a keyboard." data-large-image="https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/01_Hactivism_Overview_1920x900-1493x700.jpg" decoding="async" srcset="https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/01_Hactivism_Overview_1920x900-786x368.jpg 786w, https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/01_Hactivism_Overview_1920x900-1493x700.jpg 1493w, https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/01_Hactivism_Overview_1920x900-768x360.jpg 768w, https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/01_Hactivism_Overview_1920x900-1536x720.jpg 1536w, https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/01_Hactivism_Overview_1920x900.jpg 1920w" sizes="(max-width: 786px) 100vw, 786px" /> </figure> </div> <div class="card-content"> <div class="card-content__wrapper"> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/threat-research/" role="link" data-page-track="true" data-page-track-value="overview:hero:CL-STA-0048: An Espionage Operation Against High-Value Targets in South Asia:Threat Research"><span class=""><img src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-threat-research.svg" alt=" category icon">Threat Research</span></a> <span class="post-pub-date"><time datetime="2025-01-29T23:00:17+00:00">January 29, 2025</time></span> <a href="https://unit42.paloaltonetworks.com/espionage-campaign-targets-south-asian-entities/" class="card-title" title="CL-STA-0048: An Espionage Operation Against High-Value Targets in South Asia" role="link" data-page-track="true" data-page-track-value="overview:hero:CL-STA-0048: An Espionage Operation Against High-Value Targets in South Asia"> <h2>CL-STA-0048: An Espionage Operation Against High-Value Targets in South Asia</h2> </a> </div> </div> </div> <div class="pa l-card card--fp dummy-card"> </div> </div> </div> </section> <div class="section__wrapper"> <div class="pa sticky-nav"> <div class="l-container"> <nav> <div class="sn__dropdown-header"> <a href="#threat-research" title="Threat Research Dropdown" role="link" data-page-track="true" data-page-track-value="overview:sticky nav:Threat Research"> <img width="49" height="48" src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-threat.svg" class="attachment-thumbnail size-thumbnail" alt="" decoding="async" /> <span class="sn__selected-option">Threat Research</span> </a> <span class="arrow" tabindex="0"> <img src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/down-arrow.svg" alt="Down arrow"> </span> </div> <div class="sn__dropdown"> <ul role="list"> <li class="is-active" role="listitem"> <a href="#threat-research" title="Threat Research" role="link" data-page-track="true" data-page-track-value="overview:sticky-nav:Threat Research"> <img width="49" height="48" src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-threat.svg" class="attachment-thumbnail size-thumbnail" alt="" decoding="async" /> Threat Research </a> </li> <li role="listitem"> <a href="#top-cyberthreats" title="High Profile Threats" role="link" data-page-track="true" data-page-track-value="overview:sticky-nav:High Profile Threats"> <img width="49" height="48" src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-cyberthreat.svg" class="attachment-thumbnail size-thumbnail" alt="" decoding="async" /> High Profile Threats </a> </li> <li role="listitem"> <a href="#learning-hub" title="Learning Hub" role="link" data-page-track="true" data-page-track-value="overview:sticky-nav:Learning Hub"> <img width="49" height="48" src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-watch.svg" class="attachment-thumbnail size-thumbnail" alt="" decoding="async" /> Learning Hub </a> </li> <li role="listitem"> <a href="#threat-actor-groups" title="Threat Actor Groups" role="link" data-page-track="true" data-page-track-value="overview:sticky-nav:Threat Actor Groups"> <img width="12" height="12" src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/APT-icon-resized.svg" class="attachment-thumbnail size-thumbnail" alt="Image representing threat actor groups, showing the tracking of constellations in alignment with the Unit 42 threat actor group naming system" decoding="async" /> Threat Actor Groups </a> </li> <li role="listitem"> <a href="#trend-reports" title="Trend Reports" role="link" data-page-track="true" data-page-track-value="overview:sticky-nav:Trend Reports"> <img width="49" height="48" src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-reports.svg" class="attachment-thumbnail size-thumbnail" alt="" decoding="async" /> Trend Reports </a> </li> </ul> </div> </nav> </div> </div> <section class="section section--threat-research" id="threat-research"> <div class="pa research-grid"> <div class="l-container"> <div class="research-grid__cta"> <div class="cta-title"> <h3>Access the latest threat research</h3> <a class="l-btn" href="/category/threat-research/" title="View all research" target="" role="link" data-page-track="true" data-page-track-value="overview:threat-research:View all research"> View all research <img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/right-arrow.svg" alt="Right Arrow"> </a> </div> </div> </div> <div class="l-container"> <div class="research-grid__wrapper"> <div class="research-grid__cards"> <div class="pa l-card l-card--research"> <div class="card-media"> <figure landscape> <img width="786" height="368" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/02_Security-Technology_Category_1920x900-786x368.jpg" class="lozad" alt="Pictorial representation of graph neural networks. Digital representation of a human eye with binary code superimposed over it, emphasizing concepts of cybersecurity and digital surveillance." decoding="async" data-srcset="https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/02_Security-Technology_Category_1920x900-786x368.jpg 786w, https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/02_Security-Technology_Category_1920x900-1493x700.jpg 1493w, https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/02_Security-Technology_Category_1920x900-768x360.jpg 768w, https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/02_Security-Technology_Category_1920x900-1536x720.jpg 1536w, https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/02_Security-Technology_Category_1920x900.jpg 1920w" sizes="(max-width: 786px) 100vw, 786px" /> </figure> </div> <div class="card-content"> <div class="card-content__wrapper"> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/cybercrime/" role="link" data-page-track="true" data-page-track-value="overview:threat-research:One Step Ahead in Cyber Hide-and-Seek: Automating Malicious Infrastructure Discovery With Graph Neural Networks:Cybercrime"><span class=""><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/cybercrime.svg" alt=" category icon">Cybercrime</span></a> <span class="post-pub-date"><time datetime="2025-01-14T11:00:37+00:00">January 14, 2025</time></span> <a href="https://unit42.paloaltonetworks.com/graph-neural-networks/" title="One Step Ahead in Cyber Hide-and-Seek: Automating Malicious Infrastructure Discovery With Graph Neural Networks" role="link" data-page-track="true" data-page-track-value="overview:threat-research:One Step Ahead in Cyber Hide-and-Seek: Automating Malicious Infrastructure Discovery With Graph Neural Networks"> <h4>One Step Ahead in Cyber Hide-and-Seek: Automating Malicious Infrastructure Discovery With Graph Neural Networks</h4> </a> <ul class="card-tags" role="list"> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/phishing/" title="phishing" role="link" data-page-track="true" data-page-track-value="overview:threat-research:One Step Ahead in Cyber Hide-and-Seek: Automating Malicious Infrastructure Discovery With Graph Neural Networks:phishing">Phishing</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/malicious-domains/" title="Malicious Domains" role="link" data-page-track="true" data-page-track-value="overview:threat-research:One Step Ahead in Cyber Hide-and-Seek: Automating Malicious Infrastructure Discovery With Graph Neural Networks:Malicious Domains">Malicious Domains</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/deep-learning/" title="deep learning" role="link" data-page-track="true" data-page-track-value="overview:threat-research:One Step Ahead in Cyber Hide-and-Seek: Automating Malicious Infrastructure Discovery With Graph Neural Networks:deep learning">Deep learning</a> </li></ul> </div> <div class="card-content__link"> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/graph-neural-networks/" title="Read More about it" role="link" data-page-track="true" data-page-track-value="overview:threat-research:One Step Ahead in Cyber Hide-and-Seek: Automating Malicious Infrastructure Discovery With Graph Neural Networks:read now">Read now</a> </div> </div> </div> <div class="pa l-card l-card--research"> <div class="card-media"> <figure landscape> <img width="786" height="368" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/12/13_Security-Technology_Category_1920x900-786x368.jpg" class="lozad" alt="A pictorial representation of a jailbreaking technique. Abstract digital tunnel with glowing blue lights and intricate patterns, representing data or technology." decoding="async" data-srcset="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/12/13_Security-Technology_Category_1920x900-786x368.jpg 786w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/12/13_Security-Technology_Category_1920x900-1493x700.jpg 1493w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/12/13_Security-Technology_Category_1920x900-768x360.jpg 768w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/12/13_Security-Technology_Category_1920x900-1536x720.jpg 1536w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/12/13_Security-Technology_Category_1920x900.jpg 1920w" sizes="(max-width: 786px) 100vw, 786px" /> </figure> </div> <div class="card-content"> <div class="card-content__wrapper"> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/malware/" role="link" data-page-track="true" data-page-track-value="overview:threat-research:Bad Likert Judge: A Novel Multi-Turn Technique to Jailbreak LLMs by Misusing Their Evaluation Capability:Malware"><span class=""><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/malware.svg" alt=" category icon">Malware</span></a> <span class="post-pub-date"><time datetime="2024-12-31T23:00:16+00:00">December 31, 2024</time></span> <a href="https://unit42.paloaltonetworks.com/multi-turn-technique-jailbreaks-llms/" title="Bad Likert Judge: A Novel Multi-Turn Technique to Jailbreak LLMs by Misusing Their Evaluation Capability" role="link" data-page-track="true" data-page-track-value="overview:threat-research:Bad Likert Judge: A Novel Multi-Turn Technique to Jailbreak LLMs by Misusing Their Evaluation Capability"> <h4>Bad Likert Judge: A Novel Multi-Turn Technique to Jailbreak LLMs by Misusing Their Evaluation Capability</h4> </a> <ul class="card-tags" role="list"> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/genai/" title="GenAI" role="link" data-page-track="true" data-page-track-value="overview:threat-research:Bad Likert Judge: A Novel Multi-Turn Technique to Jailbreak LLMs by Misusing Their Evaluation Capability:GenAI">GenAI</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/prompt-injection/" title="prompt injection" role="link" data-page-track="true" data-page-track-value="overview:threat-research:Bad Likert Judge: A Novel Multi-Turn Technique to Jailbreak LLMs by Misusing Their Evaluation Capability:prompt injection">Prompt injection</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/jailbroken/" title="jailbroken" role="link" data-page-track="true" data-page-track-value="overview:threat-research:Bad Likert Judge: A Novel Multi-Turn Technique to Jailbreak LLMs by Misusing Their Evaluation Capability:jailbroken">Jailbroken</a> </li></ul> </div> <div class="card-content__link"> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/multi-turn-technique-jailbreaks-llms/" title="Read More about it" role="link" data-page-track="true" data-page-track-value="overview:threat-research:Bad Likert Judge: A Novel Multi-Turn Technique to Jailbreak LLMs by Misusing Their Evaluation Capability:read now">Read now</a> </div> </div> </div> <div class="pa l-card l-card--research"> <div class="card-media"> <figure landscape> <img width="786" height="368" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/12/04_Tutorial_Category_1920x900-786x368.jpg" class="lozad" alt="Pictorial representation of using LLMs to obfuscate malicious JavaScript detection. A man wearing glasses, looking intently at a screen with reflections visible in the glasses of computer code." decoding="async" data-srcset="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/12/04_Tutorial_Category_1920x900-786x368.jpg 786w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/12/04_Tutorial_Category_1920x900-1493x700.jpg 1493w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/12/04_Tutorial_Category_1920x900-768x360.jpg 768w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/12/04_Tutorial_Category_1920x900-1536x720.jpg 1536w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/12/04_Tutorial_Category_1920x900.jpg 1920w" sizes="(max-width: 786px) 100vw, 786px" /> </figure> </div> <div class="card-content"> <div class="card-content__wrapper"> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/malware/" role="link" data-page-track="true" data-page-track-value="overview:threat-research:Now You See Me, Now You Don’t: Using LLMs to Obfuscate Malicious JavaScript:Malware"><span class=""><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/malware.svg" alt=" category icon">Malware</span></a> <span class="post-pub-date"><time datetime="2024-12-20T11:00:39+00:00">December 20, 2024</time></span> <a href="https://unit42.paloaltonetworks.com/using-llms-obfuscate-malicious-javascript/" title="Now You See Me, Now You Don’t: Using LLMs to Obfuscate Malicious JavaScript" role="link" data-page-track="true" data-page-track-value="overview:threat-research:Now You See Me, Now You Don’t: Using LLMs to Obfuscate Malicious JavaScript"> <h4>Now You See Me, Now You Don’t: Using LLMs to Obfuscate Malicious JavaScript</h4> </a> <ul class="card-tags" role="list"> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/credential-stealer/" title="credential stealer" role="link" data-page-track="true" data-page-track-value="overview:threat-research:Now You See Me, Now You Don’t: Using LLMs to Obfuscate Malicious JavaScript:credential stealer">Credential stealer</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/data-augmentation/" title="Data Augmentation" role="link" data-page-track="true" data-page-track-value="overview:threat-research:Now You See Me, Now You Don’t: Using LLMs to Obfuscate Malicious JavaScript:Data Augmentation">Data Augmentation</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/fraudgpt/" title="FraudGPT" role="link" data-page-track="true" data-page-track-value="overview:threat-research:Now You See Me, Now You Don’t: Using LLMs to Obfuscate Malicious JavaScript:FraudGPT">FraudGPT</a> </li></ul> </div> <div class="card-content__link"> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/using-llms-obfuscate-malicious-javascript/" title="Read More about it" role="link" data-page-track="true" data-page-track-value="overview:threat-research:Now You See Me, Now You Don’t: Using LLMs to Obfuscate Malicious JavaScript:read now">Read now</a> </div> </div> </div> </div> </div> </div> </div> </section> <section class="section section--trend-reports" id="cortex-symphony-event"> <div class="pa eip"> <div class="l-container"> <div class="cta-title"> <h3>Experience the ultimate cybersecurity transformation event.</h3> <a class="l-btn" href="https://start.paloaltonetworks.com/symphony2025?utm_source=u42-web&utm_medium=web&utm_campaign=symphony25&utm_content=" title="Register Now" target="" role="link" data-page-track="true" data-page-track-value="overview:cortex-symphony-event:Register Now"> Register Now <img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/right-arrow.svg" alt="Right Arrow"> </a> </div> <div class="report__wrapper"> <div class="report-content"> <article> <a class="rc__title" href="https://start.paloaltonetworks.com/symphony2025?utm_source=u42-web&utm_medium=web&utm_campaign=symphony25&utm_content=" title="Symphony: The Ultimate Cybersecurity Transformation Event of 2025" role="link" data-page-track="true" data-page-track-value="overview:cortex-symphony-event:Symphony: The Ultimate Cybersecurity Transformation Event of 2025"> <h4>Symphony: The Ultimate Cybersecurity Transformation Event of 2025</h4> </a> <div class="report-editor__content"> <p>This 1-hour virtual summit is your VIP pass to the future of security innovation, packed with exclusive insights, live demos and stories from pros who are already conquering the toughest threats with Cortex®.</p> <ul> <li>Get insights from world-class Unit 42® experts that help you anticipate and shut down threats before they strike.</li> <li>Hear transformation stories from SecOps leaders who’ve achieved breakthrough security outcomes with Cortex XSIAM®, so you can too.</li> <li>Get a first look into the bold new future of cloud security unified with the world’s leading SecOps platform.</li> </ul> </div> <a class="hyperlink" href="https://start.paloaltonetworks.com/symphony2025?utm_source=u42-web&utm_medium=web&utm_campaign=symphony25&utm_content=" title="Register Now" target="_blank" role="link" data-page-track="true" data-page-track-value="overview:cortex-symphony-event:Symphony: The Ultimate Cybersecurity Transformation Event of 2025:Register Now"> Register Now </a> </article> </div> <div class="report-image"> <picture> <img width="1200" height="1000" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/cortex_symphony-25_threat-research-center_1200x1000.jpg" class="lozad" alt="Promotional image for 'Symphony 25,' a virtual summit by Palo Alto Networks and Cortex, featuring an individual with blonde hair against a neon-lit city background. Text reads 'Undermine Adversaries, Unleash SecOps,' event date February 19-20." decoding="async" data-srcset="https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/cortex_symphony-25_threat-research-center_1200x1000.jpg 1200w, https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/cortex_symphony-25_threat-research-center_1200x1000-528x440.jpg 528w, https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/cortex_symphony-25_threat-research-center_1200x1000-840x700.jpg 840w, https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/cortex_symphony-25_threat-research-center_1200x1000-768x640.jpg 768w" sizes="(max-width: 1200px) 100vw, 1200px" /> </picture> </div> </div> </div> </div> </section> <section class="section section--top-cyberthreats" id="top-cyberthreats"> <div class="threat-grid__cta"> <div class="cta-title"> <h3>Understand high profile cyberthreats and vulnerabilities</h3> <a class="l-btn" href="/category/top-threats" title="View high profile threats" target="" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:View high profile threats"> View high profile threats <img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/right-arrow.svg" alt="Right Arrow"> </a> </div> </div> <div class="pa threat-grid">  <div class="l-container"> <div class="featured-card"> <article> <picture class="featured-image"> <img width="1920" height="900" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/11/07_Vulnerabilities_1920x900.jpg" class="lozad" alt="Pictorial representation of vulnerabilities such as CVE-2024-0012 and CVE-2024-9474. A panoramic nighttime view of city skyline with illuminated high-rise buildings and vibrant lights." data-srcset="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/11/07_Vulnerabilities_1920x900.jpg 1920w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/11/07_Vulnerabilities_1920x900-786x368.jpg 786w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/11/07_Vulnerabilities_1920x900-1493x700.jpg 1493w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/11/07_Vulnerabilities_1920x900-768x360.jpg 768w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/11/07_Vulnerabilities_1920x900-1536x720.jpg 1536w" /> </picture> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/top-cyberthreats/" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-0012 and CVE-2024-9474 (Updated Nov. 22):High Profile Threats"><span class=""><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/top-threats.svg" alt=" category icon">High Profile Threats</span></a> <span class="post-pub-date"><time datetime="2024-11-22T11:21:18+00:00">November 22, 2024</time></span> <a class="fc__title" href="https://unit42.paloaltonetworks.com/cve-2024-0012-cve-2024-9474/" title="Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-0012 and CVE-2024-9474 (Updated Nov. 22)" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-0012 and CVE-2024-9474 (Updated Nov. 22)"> <h4>Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-0012 and CVE-2024-9474 (Updated Nov. 22)</h4> </a> <a href="https://unit42.paloaltonetworks.com/cve-2024-0012-cve-2024-9474/" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-0012 and CVE-2024-9474 (Updated Nov. 22)"> <p>We detail the observed limited activity regarding authentication bypass vulnerability CVE-2024-0012 affecting specific versions of PAN-OS software, and include protections and mitigations.</p> </a> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/cve-2024-0012-cve-2024-9474/" title="Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-0012 and CVE-2024-9474 (Updated Nov. 22)" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-0012 and CVE-2024-9474 (Updated Nov. 22):read now">Read now</a> </article> </div> </div>   <div class="threat-grid__cards"> <div class="pa l-card l-card--transparent" > <a href="https://unit42.paloaltonetworks.com/threat-brief-ivanti-cve-2025-0282-cve-2025-0283/" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Brief: CVE-2025-0282 and CVE-2025-0283 (Updated Jan. 17):card" title="Threat Brief: CVE-2025-0282 and CVE-2025-0283 (Updated Jan. 17)" class="card-media " > <figure class="aspect-box" style="--aspect-ratio:217/212;" tabindex="0"> <img width="300" height="300" src="" class="lozad" alt="Pictorial representation of vulnerabilities like CVE-2025-0282, CVE-2025-0283. Digital representation of a global network with interconnected lines and nodes over a map, highlighting global connectivity and data exchange." data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/11_Security-Technology_Category_1920x900-300x300.jpg" decoding="async" /> </figure> </a> <div class="card-content"> <div class="card-content__wrapper"> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/vulnerabilities/" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Brief: CVE-2025-0282 and CVE-2025-0283 (Updated Jan. 17):Vulnerabilities"><span class=""><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-vulnerability-1.svg" alt=" category icon">Vulnerabilities</span></a> <span class="post-pub-date"><time datetime="2025-01-17T00:30:13+00:00">January 16, 2025</time></span> <a href="https://unit42.paloaltonetworks.com/threat-brief-ivanti-cve-2025-0282-cve-2025-0283/" title="Threat Brief: CVE-2025-0282 and CVE-2025-0283 (Updated Jan. 17)" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Brief: CVE-2025-0282 and CVE-2025-0283 (Updated Jan. 17)"> <h4 class="post-title">Threat Brief: CVE-2025-0282 and CVE-2025-0283 (Updated Jan. 17)</h4> </a> <ul class="card-tags" role="list"> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/ivanti/" title="Ivanti" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Brief: CVE-2025-0282 and CVE-2025-0283 (Updated Jan. 17):Ivanti">Ivanti</a> </li></ul> </div> <div class="card-content__link"> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/threat-brief-ivanti-cve-2025-0282-cve-2025-0283/" title="Read now" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Brief: CVE-2025-0282 and CVE-2025-0283 (Updated Jan. 17):read now">Read now</a> </div> </div> </div><div class="pa l-card l-card--transparent" > <a href="https://unit42.paloaltonetworks.com/threat-assessment-howling-scorpius-akira-ransomware/" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Assessment: Howling Scorpius (Akira Ransomware):card" title="Threat Assessment: Howling Scorpius (Akira Ransomware)" class="card-media " > <figure class="aspect-box" style="--aspect-ratio:217/212;" tabindex="0"> <img width="300" height="300" src="" class="lozad" alt="A pictorial representation of Akira ransomware, distributed by Howling Scorpius. A person's hand typing on a keyboard with a digital screen displaying the word "password" highlighted in blue, set against a backdrop of various cybersecurity interface graphics." data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/11/09_Cybercrime_Category_1920x900-300x300.jpg" decoding="async" /> </figure> </a> <div class="card-content"> <div class="card-content__wrapper"> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/ransomware/" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Assessment: Howling Scorpius (Akira Ransomware):Ransomware"><span class=""><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-ransomware.svg" alt=" category icon">Ransomware</span></a> <span class="post-pub-date"><time datetime="2024-12-02T23:00:10+00:00">December 2, 2024</time></span> <a href="https://unit42.paloaltonetworks.com/threat-assessment-howling-scorpius-akira-ransomware/" title="Threat Assessment: Howling Scorpius (Akira Ransomware)" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Assessment: Howling Scorpius (Akira Ransomware)"> <h4 class="post-title">Threat Assessment: Howling Scorpius (Akira Ransomware)</h4> </a> <ul class="card-tags" role="list"> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/howling-scorpius/" title="Howling Scorpius" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Assessment: Howling Scorpius (Akira Ransomware):Howling Scorpius">Howling Scorpius</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/leak-site/" title="Leak site" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Assessment: Howling Scorpius (Akira Ransomware):Leak site">Leak site</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/torrenting/" title="torrenting" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Assessment: Howling Scorpius (Akira Ransomware):torrenting">Torrenting</a> </li></ul> </div> <div class="card-content__link"> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/threat-assessment-howling-scorpius-akira-ransomware/" title="Read now" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Assessment: Howling Scorpius (Akira Ransomware):read now">Read now</a> </div> </div> </div><div class="pa l-card l-card--transparent" > <a href="https://unit42.paloaltonetworks.com/cve-2024-0012-cve-2024-9474/" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-0012 and CVE-2024-9474 (Updated Nov. 22):card" title="Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-0012 and CVE-2024-9474 (Updated Nov. 22)" class="card-media " > <figure class="aspect-box" style="--aspect-ratio:217/212;" tabindex="0"> <img width="300" height="300" src="" class="lozad" alt="Pictorial representation of vulnerabilities such as CVE-2024-0012 and CVE-2024-9474. A panoramic nighttime view of city skyline with illuminated high-rise buildings and vibrant lights." data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/11/07_Vulnerabilities_1920x900-300x300.jpg" decoding="async" /> </figure> </a> <div class="card-content"> <div class="card-content__wrapper"> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/vulnerabilities/" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-0012 and CVE-2024-9474 (Updated Nov. 22):Vulnerabilities"><span class=""><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-vulnerability-1.svg" alt=" category icon">Vulnerabilities</span></a> <span class="post-pub-date"><time datetime="2024-11-22T11:21:18+00:00">November 22, 2024</time></span> <a href="https://unit42.paloaltonetworks.com/cve-2024-0012-cve-2024-9474/" title="Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-0012 and CVE-2024-9474 (Updated Nov. 22)" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-0012 and CVE-2024-9474 (Updated Nov. 22)"> <h4 class="post-title">Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-0012 and CVE-2024-9474 (Updated Nov. 22)</h4> </a> <ul class="card-tags" role="list"> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/pan-os/" title="PAN-OS" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-0012 and CVE-2024-9474 (Updated Nov. 22):PAN-OS">PAN-OS</a> </li></ul> </div> <div class="card-content__link"> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/cve-2024-0012-cve-2024-9474/" title="Read now" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-0012 and CVE-2024-9474 (Updated Nov. 22):read now">Read now</a> </div> </div> </div><div class="pa l-card l-card--transparent" > <a href="https://unit42.paloaltonetworks.com/threat-assessment-blacksuit-ransomware-ignoble-scorpius/" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Assessment: Ignoble Scorpius, Distributors of BlackSuit Ransomware:card" title="Threat Assessment: Ignoble Scorpius, Distributors of BlackSuit Ransomware" class="card-media " > <figure class="aspect-box" style="--aspect-ratio:217/212;" tabindex="0"> <img width="300" height="300" src="" class="lozad" alt="Pictorial representation of a threat like BlackSuit ransomware. An illustration of a modern workspace with a laptop displaying cybersecurity icons, surrounded by stacks of coins and a credit card, all depicted in a neon, digital art style." data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/11/04_Ransomware_Category_1920x900-300x300.jpg" decoding="async" /> </figure> </a> <div class="card-content"> <div class="card-content__wrapper"> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/ransomware/" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Assessment: Ignoble Scorpius, Distributors of BlackSuit Ransomware:Ransomware"><span class=""><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-ransomware.svg" alt=" category icon">Ransomware</span></a> <span class="post-pub-date"><time datetime="2024-11-20T11:00:53+00:00">November 20, 2024</time></span> <a href="https://unit42.paloaltonetworks.com/threat-assessment-blacksuit-ransomware-ignoble-scorpius/" title="Threat Assessment: Ignoble Scorpius, Distributors of BlackSuit Ransomware" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Assessment: Ignoble Scorpius, Distributors of BlackSuit Ransomware"> <h4 class="post-title">Threat Assessment: Ignoble Scorpius, Distributors of BlackSuit Ransomware</h4> </a> <ul class="card-tags" role="list"> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/blacksuit-ransomware/" title="BlackSuit ransomware" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Assessment: Ignoble Scorpius, Distributors of BlackSuit Ransomware:BlackSuit ransomware">BlackSuit ransomware</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/construction/" title="construction" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Assessment: Ignoble Scorpius, Distributors of BlackSuit Ransomware:construction">Construction</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/education/" title="Education" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Assessment: Ignoble Scorpius, Distributors of BlackSuit Ransomware:Education">Education</a> </li></ul> </div> <div class="card-content__link"> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/threat-assessment-blacksuit-ransomware-ignoble-scorpius/" title="Read now" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Assessment: Ignoble Scorpius, Distributors of BlackSuit Ransomware:read now">Read now</a> </div> </div> </div><div class="pa l-card l-card--transparent" > <a href="https://unit42.paloaltonetworks.com/inc-ransomware-rebrand-to-lynx/" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Lynx Ransomware: A Rebranding of INC Ransomware:card" title="Lynx Ransomware: A Rebranding of INC Ransomware" class="card-media " > <figure class="aspect-box" style="--aspect-ratio:217/212;" tabindex="0"> <img width="300" height="300" src="" class="lozad" alt="Pictorial representation of Lynx ransomware. A digital illustration of glowing chains with broken links, set against a background of binary code in blue and red." data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/10/01_Ransomware_Category_1505x922-300x300.jpg" decoding="async" /> </figure> </a> <div class="card-content"> <div class="card-content__wrapper"> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/ransomware/" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Lynx Ransomware: A Rebranding of INC Ransomware:Ransomware"><span class=""><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-ransomware.svg" alt=" category icon">Ransomware</span></a> <span class="post-pub-date"><time datetime="2024-10-10T21:00:46+00:00">October 10, 2024</time></span> <a href="https://unit42.paloaltonetworks.com/inc-ransomware-rebrand-to-lynx/" title="Lynx Ransomware: A Rebranding of INC Ransomware" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Lynx Ransomware: A Rebranding of INC Ransomware"> <h4 class="post-title">Lynx Ransomware: A Rebranding of INC Ransomware</h4> </a> <ul class="card-tags" role="list"> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/leak-site/" title="Leak site" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Lynx Ransomware: A Rebranding of INC Ransomware:Leak site">Leak site</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/double-extortion/" title="double extortion" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Lynx Ransomware: A Rebranding of INC Ransomware:double extortion">Double extortion</a> </li></ul> </div> <div class="card-content__link"> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/inc-ransomware-rebrand-to-lynx/" title="Read now" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Lynx Ransomware: A Rebranding of INC Ransomware:read now">Read now</a> </div> </div> </div><div class="pa l-card l-card--transparent" > <a href="https://unit42.paloaltonetworks.com/repellent-scorpius-cicada3301-ransomware/" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Assessment: Repellent Scorpius, Distributors of Cicada3301 Ransomware:card" title="Threat Assessment: Repellent Scorpius, Distributors of Cicada3301 Ransomware" class="card-media " > <figure class="aspect-box" style="--aspect-ratio:217/212;" tabindex="0"> <img width="300" height="300" src="" class="lozad" alt="A pictorial representation of Cicada3301 ransomware. Digital rendering of a transparent padlock superimposed with programming code and placed on a network of connected databases, symbolizing cybersecurity and data protection." data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/09/06_Ransomware_Category_1920x900-300x300.jpg" decoding="async" /> </figure> </a> <div class="card-content"> <div class="card-content__wrapper"> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/ransomware/" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Assessment: Repellent Scorpius, Distributors of Cicada3301 Ransomware:Ransomware"><span class=""><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-ransomware.svg" alt=" category icon">Ransomware</span></a> <span class="post-pub-date"><time datetime="2024-09-10T10:00:08+00:00">September 10, 2024</time></span> <a href="https://unit42.paloaltonetworks.com/repellent-scorpius-cicada3301-ransomware/" title="Threat Assessment: Repellent Scorpius, Distributors of Cicada3301 Ransomware" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Assessment: Repellent Scorpius, Distributors of Cicada3301 Ransomware"> <h4 class="post-title">Threat Assessment: Repellent Scorpius, Distributors of Cicada3301 Ransomware</h4> </a> <ul class="card-tags" role="list"> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/raas/" title="RaaS" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Assessment: Repellent Scorpius, Distributors of Cicada3301 Ransomware:RaaS">RaaS</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/data-exfiltration/" title="data exfiltration" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Assessment: Repellent Scorpius, Distributors of Cicada3301 Ransomware:data exfiltration">Data exfiltration</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/leak-site/" title="Leak site" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Assessment: Repellent Scorpius, Distributors of Cicada3301 Ransomware:Leak site">Leak site</a> </li></ul> </div> <div class="card-content__link"> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/repellent-scorpius-cicada3301-ransomware/" title="Read now" role="link" data-page-track="true" data-page-track-value="overview:top-cyberthreats:Threat Assessment: Repellent Scorpius, Distributors of Cicada3301 Ransomware:read now">Read now</a> </div> </div> </div> </div>  </div> </section> <section class="section section--watch-learn" id="learning-hub"> <div class="pa card-slider"> <div class="l-container"> <div class="cta-title"> <h3>Watch, listen and learn about cybersecurity topics</h3> <a class="l-btn" href="/category/learning-hub/" title="View All" target="" role="link" data-page-track="true" data-page-track-value="overview:learning-hub:View All"> View All <img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/right-arrow.svg" alt="Right Arrow"> </a> </div> </div> <div class="card-slider__wrapper"> <div class="cs-slider" id="cardSlider"> <div class="cs__item"> <div class="cs__item-wrapper"> <figure> <img width="786" height="368" src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/01_Tutorial_Category_1920x900-786x368.jpg" class="attachment-medium size-medium" alt="A Black man in business attire using a tablet, with illuminated skyscrapers in the background." decoding="async" srcset="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/01_Tutorial_Category_1920x900-786x368.jpg 786w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/01_Tutorial_Category_1920x900-1493x700.jpg 1493w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/01_Tutorial_Category_1920x900-768x360.jpg 768w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/01_Tutorial_Category_1920x900-1536x720.jpg 1536w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/01_Tutorial_Category_1920x900.jpg 1920w" sizes="(max-width: 786px) 100vw, 786px" /> </figure> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/cybersecurity-tutorials/" role="link" data-page-track="true" data-page-track-value="overview:learning-hub:Wireshark Tutorial: Exporting Objects From a Pcap:Cybersecurity Tutorials"><span class=""><img src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/cybersecurity-tutorials.svg" alt=" category icon">Cybersecurity Tutorials</span></a> <span class="post-pub-date"><time datetime="2024-03-01T14:00:28+00:00">March 1, 2024</time></span> <a class="cs__title" href="https://unit42.paloaltonetworks.com/using-wireshark-exporting-objects-from-a-pcap/" title="Read more" role="link" data-page-track="true" data-page-track-value="overview:learning-hub:Wireshark Tutorial: Exporting Objects From a Pcap"> <h4>Wireshark Tutorial: <br>Exporting Objects From a Pcap </h4> </a> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/using-wireshark-exporting-objects-from-a-pcap/" title="Learn more" role="link" data-page-track="true" data-page-track-value="overview:learning-hub:Wireshark Tutorial: Exporting Objects From a Pcap:learn more">Learn more</a> </div> </div><div class="cs__item"> <div class="cs__item-wrapper"> <figure> <img width="786" height="368" src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/06_Malware_Category_1920x900-786x368.jpg" class="attachment-medium size-medium" alt="Person in a blurred motion is working on a computer with screen showing lines of code, emphasizing a dynamic and intense focus on software development or programming in a dimly lit room." decoding="async" srcset="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/06_Malware_Category_1920x900-786x368.jpg 786w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/06_Malware_Category_1920x900-1493x700.jpg 1493w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/06_Malware_Category_1920x900-768x360.jpg 768w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/06_Malware_Category_1920x900-1536x720.jpg 1536w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/06_Malware_Category_1920x900.jpg 1920w" sizes="(max-width: 786px) 100vw, 786px" /> </figure> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/malware/" role="link" data-page-track="true" data-page-track-value="overview:learning-hub:Exploring the Latest Mispadu Stealer Variant:Malware"><span class=""><img src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/malware.svg" alt=" category icon">Malware</span></a> <span class="post-pub-date"><time datetime="2024-02-02T11:00:45+00:00">February 2, 2024</time></span> <a class="cs__title" href="https://unit42.paloaltonetworks.com/mispadu-infostealer-variant/" title="Read more" role="link" data-page-track="true" data-page-track-value="overview:learning-hub:Exploring the Latest Mispadu Stealer Variant"> <h4>Exploring the <br>Latest Mispadu Stealer Variant </h4> </a> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/mispadu-infostealer-variant/" title="Learn more" role="link" data-page-track="true" data-page-track-value="overview:learning-hub:Exploring the Latest Mispadu Stealer Variant:learn more">Learn more</a> </div> </div><div class="cs__item"> <div class="cs__item-wrapper"> <figure> <img width="786" height="328" src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/01/Hero-Desktop-786x328.png" class="attachment-medium size-medium" alt="" decoding="async" srcset="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/01/Hero-Desktop-786x328.png 786w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/01/Hero-Desktop-1680x700.png 1680w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/01/Hero-Desktop-768x320.png 768w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/01/Hero-Desktop-1536x640.png 1536w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/01/Hero-Desktop.png 1920w" sizes="(max-width: 786px) 100vw, 786px" /> </figure> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/vulnerabilities/" role="link" data-page-track="true" data-page-track-value="overview:learning-hub:Threat Vector Podcast:Vulnerabilities"><span class=""><img src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-vulnerability-1.svg" alt=" category icon">Vulnerabilities</span></a> <span class="post-pub-date"><time datetime="2024-01-01T21:32:20+00:00">January 1, 2024</time></span> <a class="cs__title" href="https://unit42.paloaltonetworks.com/unit-42-threat-vector-podcast/" title="Read more" role="link" data-page-track="true" data-page-track-value="overview:learning-hub:Threat Vector Podcast"> <h4>Threat Vector <br>Podcast </h4> </a> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/unit-42-threat-vector-podcast/" title="Learn more" role="link" data-page-track="true" data-page-track-value="overview:learning-hub:Threat Vector Podcast:learn more">Learn more</a> </div> </div><div class="cs__item"> <div class="cs__item-wrapper"> <figure> <img width="786" height="368" src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/02_Tutorial_Category_1920x900-786x368.jpg" class="attachment-medium size-medium" alt="A man wearing headphones with a microphone is focused on multiple computer screens displaying graphs and data, indicating involvement in a professional tech or analytics environment." decoding="async" srcset="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/02_Tutorial_Category_1920x900-786x368.jpg 786w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/02_Tutorial_Category_1920x900-1493x700.jpg 1493w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/02_Tutorial_Category_1920x900-768x360.jpg 768w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/02_Tutorial_Category_1920x900-1536x720.jpg 1536w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/02_Tutorial_Category_1920x900.jpg 1920w" sizes="(max-width: 786px) 100vw, 786px" /> </figure> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/cybersecurity-tutorials/" role="link" data-page-track="true" data-page-track-value="overview:learning-hub:Wireshark Tutorial: Identifying Hosts and Users:Cybersecurity Tutorials"><span class=""><img src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/cybersecurity-tutorials.svg" alt=" category icon">Cybersecurity Tutorials</span></a> <span class="post-pub-date"><time datetime="2023-10-10T16:45:50+00:00">October 10, 2023</time></span> <a class="cs__title" href="https://unit42.paloaltonetworks.com/using-wireshark-identifying-hosts-and-users/" title="Read more" role="link" data-page-track="true" data-page-track-value="overview:learning-hub:Wireshark Tutorial: Identifying Hosts and Users"> <h4>Wireshark Tutorial: <br>Identifying Hosts and Users </h4> </a> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/using-wireshark-identifying-hosts-and-users/" title="Learn more" role="link" data-page-track="true" data-page-track-value="overview:learning-hub:Wireshark Tutorial: Identifying Hosts and Users:learn more">Learn more</a> </div> </div><div class="cs__item"> <div class="cs__item-wrapper"> <figure> <img width="786" height="368" src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/03_Tutorial_Category_1920x900-786x368.jpg" class="attachment-medium size-medium" alt="An abstract illustration of a video that has been paused. It includes a red progress bar and a large white Play button." decoding="async" srcset="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/03_Tutorial_Category_1920x900-786x368.jpg 786w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/03_Tutorial_Category_1920x900-1493x700.jpg 1493w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/03_Tutorial_Category_1920x900-768x360.jpg 768w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/03_Tutorial_Category_1920x900-1536x720.jpg 1536w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/03_Tutorial_Category_1920x900.jpg 1920w" sizes="(max-width: 786px) 100vw, 786px" /> </figure> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/cybersecurity-tutorials/" role="link" data-page-track="true" data-page-track-value="overview:learning-hub:Wireshark Tutorial: Display Filter Expressions:Cybersecurity Tutorials"><span class=""><img src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/cybersecurity-tutorials.svg" alt=" category icon">Cybersecurity Tutorials</span></a> <span class="post-pub-date"><time datetime="2023-09-08T13:00:38+00:00">September 8, 2023</time></span> <a class="cs__title" href="https://unit42.paloaltonetworks.com/using-wireshark-display-filter-expressions/" title="Read more" role="link" data-page-track="true" data-page-track-value="overview:learning-hub:Wireshark Tutorial: Display Filter Expressions"> <h4>Wireshark Tutorial: <br>Display Filter Expressions </h4> </a> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/using-wireshark-display-filter-expressions/" title="Learn more" role="link" data-page-track="true" data-page-track-value="overview:learning-hub:Wireshark Tutorial: Display Filter Expressions:learn more">Learn more</a> </div> </div> </div> </div> </div> </section> <section class="section section--top-cyberthreats" id="threat-actor-groups"> <div class="threat-grid__cta"> <div class="cta-title"> <h3>Follow the activities of threat actor groups tracked by Unit 42</h3> <a class="l-btn" href="/category/threat-actor-groups" title="All threat actor posts" target="" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:All threat actor posts"> All threat actor posts <img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/right-arrow.svg" alt="Right Arrow"> </a> </div> </div> <div class="pa threat-grid">  <div class="l-container"> <div class="featured-card"> <article> <picture class="featured-image"> <img width="1920" height="900" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/Generic-B-1920x900-1.png" class="lozad" alt="Constellation image representing the constellation schema used by Palo Alto Networks Unit 42 to track nation-state and cybercrime threat actor groups" data-srcset="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/Generic-B-1920x900-1.png 1920w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/Generic-B-1920x900-1-786x368.png 786w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/Generic-B-1920x900-1-1493x700.png 1493w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/Generic-B-1920x900-1-768x360.png 768w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/Generic-B-1920x900-1-1536x720.png 1536w" /> </picture> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/cybercrime/" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Threat Actor Groups Tracked by Palo Alto Networks Unit 42:Cybercrime"><span class=""><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/cybercrime.svg" alt=" category icon">Cybercrime</span></a> <span class="post-pub-date"><time datetime="2024-06-28T01:00:15+00:00">June 27, 2024</time></span> <a class="fc__title" href="https://unit42.paloaltonetworks.com/threat-actor-groups-tracked-by-palo-alto-networks-unit-42/" title="Threat Actor Groups Tracked by Palo Alto Networks Unit 42" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Threat Actor Groups Tracked by Palo Alto Networks Unit 42"> <h4>Threat Actor Groups Tracked by Palo Alto Networks Unit 42</h4> </a> <a href="https://unit42.paloaltonetworks.com/threat-actor-groups-tracked-by-palo-alto-networks-unit-42/" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Threat Actor Groups Tracked by Palo Alto Networks Unit 42"> <p>A comprehensive list of threat actor groups tracked by Unit 42, along with information such as summaries and industries typically impacted.</p> </a> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/threat-actor-groups-tracked-by-palo-alto-networks-unit-42/" title="Threat Actor Groups Tracked by Palo Alto Networks Unit 42" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Threat Actor Groups Tracked by Palo Alto Networks Unit 42:read now">Read now</a> </article> </div> </div>   <div class="threat-grid__cards"> <div class="pa l-card l-card--transparent" > <a href="https://unit42.paloaltonetworks.com/lightweight-directory-access-protocol-based-attacks/" data-page-track="true" data-page-track-value="overview:threat-actor-groups:LDAP Enumeration: Unveiling the Double-Edged Sword of Active Directory:card" title="LDAP Enumeration: Unveiling the Double-Edged Sword of Active Directory" class="card-media " > <figure class="aspect-box" style="--aspect-ratio:217/212;" tabindex="0"> <img width="300" height="300" src="" class="lozad" alt="Pictorial representation of attackers leveraging Active Directory or LDAP. Close-up view of a server rack panel with illuminated lights and a digital display reading 'SYSTEM HACKED'." data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/12/02_Vulnerabilities_1920x900-300x300.jpg" decoding="async" /> </figure> </a> <div class="card-content"> <div class="card-content__wrapper"> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/malware/" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:LDAP Enumeration: Unveiling the Double-Edged Sword of Active Directory:Malware"><span class=""><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/malware.svg" alt=" category icon">Malware</span></a> <span class="post-pub-date"><time datetime="2024-12-17T23:00:43+00:00">December 17, 2024</time></span> <a href="https://unit42.paloaltonetworks.com/lightweight-directory-access-protocol-based-attacks/" title="LDAP Enumeration: Unveiling the Double-Edged Sword of Active Directory" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:LDAP Enumeration: Unveiling the Double-Edged Sword of Active Directory"> <h4 class="post-title">LDAP Enumeration: Unveiling the Double-Edged Sword of Active Directory</h4> </a> <ul class="card-tags" role="list"> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/stately-taurus/" title="Stately Taurus" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:LDAP Enumeration: Unveiling the Double-Edged Sword of Active Directory:Stately Taurus">Stately Taurus</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/alphv/" title="ALPHV" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:LDAP Enumeration: Unveiling the Double-Edged Sword of Active Directory:ALPHV">ALPHV</a> </li></ul> </div> <div class="card-content__link"> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/lightweight-directory-access-protocol-based-attacks/" title="Read now" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:LDAP Enumeration: Unveiling the Double-Edged Sword of Active Directory:read now">Read now</a> </div> </div> </div><div class="pa l-card l-card--transparent" > <a href="https://unit42.paloaltonetworks.com/threat-assessment-blacksuit-ransomware-ignoble-scorpius/" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Threat Assessment: Ignoble Scorpius, Distributors of BlackSuit Ransomware:card" title="Threat Assessment: Ignoble Scorpius, Distributors of BlackSuit Ransomware" class="card-media " > <figure class="aspect-box" style="--aspect-ratio:217/212;" tabindex="0"> <img width="300" height="300" src="" class="lozad" alt="Pictorial representation of a threat like BlackSuit ransomware. An illustration of a modern workspace with a laptop displaying cybersecurity icons, surrounded by stacks of coins and a credit card, all depicted in a neon, digital art style." data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/11/04_Ransomware_Category_1920x900-300x300.jpg" decoding="async" /> </figure> </a> <div class="card-content"> <div class="card-content__wrapper"> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/ransomware/" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Threat Assessment: Ignoble Scorpius, Distributors of BlackSuit Ransomware:Ransomware"><span class=""><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-ransomware.svg" alt=" category icon">Ransomware</span></a> <span class="post-pub-date"><time datetime="2024-11-20T11:00:53+00:00">November 20, 2024</time></span> <a href="https://unit42.paloaltonetworks.com/threat-assessment-blacksuit-ransomware-ignoble-scorpius/" title="Threat Assessment: Ignoble Scorpius, Distributors of BlackSuit Ransomware" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Threat Assessment: Ignoble Scorpius, Distributors of BlackSuit Ransomware"> <h4 class="post-title">Threat Assessment: Ignoble Scorpius, Distributors of BlackSuit Ransomware</h4> </a> <ul class="card-tags" role="list"> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/blacksuit-ransomware/" title="BlackSuit ransomware" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Threat Assessment: Ignoble Scorpius, Distributors of BlackSuit Ransomware:BlackSuit ransomware">BlackSuit ransomware</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/construction/" title="construction" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Threat Assessment: Ignoble Scorpius, Distributors of BlackSuit Ransomware:construction">Construction</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/education/" title="Education" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Threat Assessment: Ignoble Scorpius, Distributors of BlackSuit Ransomware:Education">Education</a> </li></ul> </div> <div class="card-content__link"> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/threat-assessment-blacksuit-ransomware-ignoble-scorpius/" title="Read now" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Threat Assessment: Ignoble Scorpius, Distributors of BlackSuit Ransomware:read now">Read now</a> </div> </div> </div><div class="pa l-card l-card--transparent" > <a href="https://unit42.paloaltonetworks.com/fake-north-korean-it-worker-activity-cluster/" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Fake North Korean IT Worker Linked to BeaverTail Video Conference App Phishing Attack:card" title="Fake North Korean IT Worker Linked to BeaverTail Video Conference App Phishing Attack" class="card-media " > <figure class="aspect-box" style="--aspect-ratio:217/212;" tabindex="0"> <img width="300" height="300" src="" class="lozad" alt="A pictorial representation of a campaign like BeaverTail. Digital globe with interconnected network lines and data streams on a futuristic interface, symbolizing global connectivity and information technology advancements." data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/11/01_Nation-State-cyberattacks_1920x900-300x300.jpg" decoding="async" /> </figure> </a> <div class="card-content"> <div class="card-content__wrapper"> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/business-email-compromise/" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Fake North Korean IT Worker Linked to BeaverTail Video Conference App Phishing Attack:Business Email Compromise"><span class=""><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/business-email-compromise.svg" alt=" category icon">Business Email Compromise</span></a> <span class="post-pub-date"><time datetime="2024-11-14T23:00:12+00:00">November 14, 2024</time></span> <a href="https://unit42.paloaltonetworks.com/fake-north-korean-it-worker-activity-cluster/" title="Fake North Korean IT Worker Linked to BeaverTail Video Conference App Phishing Attack" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Fake North Korean IT Worker Linked to BeaverTail Video Conference App Phishing Attack"> <h4 class="post-title">Fake North Korean IT Worker Linked to BeaverTail Video Conference App Phishing Attack</h4> </a> <ul class="card-tags" role="list"> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/north-korea/" title="North Korea" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Fake North Korean IT Worker Linked to BeaverTail Video Conference App Phishing Attack:North Korea">North Korea</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/lazarus/" title="Lazarus" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Fake North Korean IT Worker Linked to BeaverTail Video Conference App Phishing Attack:Lazarus">Lazarus</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/beavertail/" title="BeaverTail" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Fake North Korean IT Worker Linked to BeaverTail Video Conference App Phishing Attack:BeaverTail">BeaverTail</a> </li></ul> </div> <div class="card-content__link"> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/fake-north-korean-it-worker-activity-cluster/" title="Read now" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Fake North Korean IT Worker Linked to BeaverTail Video Conference App Phishing Attack:read now">Read now</a> </div> </div> </div><div class="pa l-card l-card--transparent" > <a href="https://unit42.paloaltonetworks.com/silent-skimmer-latest-campaign/" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Silent Skimmer Gets Loud (Again):card" title="Silent Skimmer Gets Loud (Again)" class="card-media " > <figure class="aspect-box" style="--aspect-ratio:217/212;" tabindex="0"> <img width="300" height="300" src="" class="lozad" alt="A pictorial represntation of cybercrime like Silent Skimmer. A glowing red padlock on a wet surface with red particles floating in a misty, dark blue background." data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/11/11_Cybercrime_Category_1920x900-300x300.jpg" decoding="async" /> </figure> </a> <div class="card-content"> <div class="card-content__wrapper"> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/cybercrime/" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Silent Skimmer Gets Loud (Again):Cybercrime"><span class=""><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/cybercrime.svg" alt=" category icon">Cybercrime</span></a> <span class="post-pub-date"><time datetime="2024-11-07T11:00:13+00:00">November 7, 2024</time></span> <a href="https://unit42.paloaltonetworks.com/silent-skimmer-latest-campaign/" title="Silent Skimmer Gets Loud (Again)" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Silent Skimmer Gets Loud (Again)"> <h4 class="post-title">Silent Skimmer Gets Loud (Again)</h4> </a> <ul class="card-tags" role="list"> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/remote-code-execution/" title="Remote Code Execution" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Silent Skimmer Gets Loud (Again):Remote Code Execution">Remote Code Execution</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/python/" title="Python" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Silent Skimmer Gets Loud (Again):Python">Python</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/reverse-shells/" title="reverse shells" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Silent Skimmer Gets Loud (Again):reverse shells">Reverse shells</a> </li></ul> </div> <div class="card-content__link"> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/silent-skimmer-latest-campaign/" title="Read now" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Silent Skimmer Gets Loud (Again):read now">Read now</a> </div> </div> </div><div class="pa l-card l-card--transparent" > <a href="https://unit42.paloaltonetworks.com/north-korean-threat-group-play-ransomware/" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Jumpy Pisces Engages in Play Ransomware:card" title="Jumpy Pisces Engages in Play Ransomware" class="card-media " > <figure class="aspect-box" style="--aspect-ratio:217/212;" tabindex="0"> <img width="300" height="300" src="" class="lozad" alt="A representation of a threat group like Jumpy Pisces. Illustrative image featuring two fish and the Pisces constellation superimposed on a stylized, abstract background with flowing purple waves and a starry night sky." data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/10/Pisces-NK-A-1920x900-1-300x300.png" decoding="async" /> </figure> </a> <div class="card-content"> <div class="card-content__wrapper"> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/ransomware/" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Jumpy Pisces Engages in Play Ransomware:Ransomware"><span class=""><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-ransomware.svg" alt=" category icon">Ransomware</span></a> <span class="post-pub-date"><time datetime="2024-10-30T10:00:29+00:00">October 30, 2024</time></span> <a href="https://unit42.paloaltonetworks.com/north-korean-threat-group-play-ransomware/" title="Jumpy Pisces Engages in Play Ransomware" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Jumpy Pisces Engages in Play Ransomware"> <h4 class="post-title">Jumpy Pisces Engages in Play Ransomware</h4> </a> <ul class="card-tags" role="list"> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/north-korea/" title="North Korea" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Jumpy Pisces Engages in Play Ransomware:North Korea">North Korea</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/jumpy-pisces/" title="Jumpy Pisces" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Jumpy Pisces Engages in Play Ransomware:Jumpy Pisces">Jumpy Pisces</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/fiddling-scorpius/" title="Fiddling Scorpius" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Jumpy Pisces Engages in Play Ransomware:Fiddling Scorpius">Fiddling Scorpius</a> </li></ul> </div> <div class="card-content__link"> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/north-korean-threat-group-play-ransomware/" title="Read now" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Jumpy Pisces Engages in Play Ransomware:read now">Read now</a> </div> </div> </div><div class="pa l-card l-card--transparent" > <a href="https://unit42.paloaltonetworks.com/north-korean-threat-actors-lure-tech-job-seekers-as-fake-recruiters/" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Contagious Interview: DPRK Threat Actors Lure Tech Industry Job Seekers to Install New Variants of BeaverTail and InvisibleFerret Malware:card" title="Contagious Interview: DPRK Threat Actors Lure Tech Industry Job Seekers to Install New Variants of BeaverTail and InvisibleFerret Malware" class="card-media " > <figure class="aspect-box" style="--aspect-ratio:217/212;" tabindex="0"> <img width="300" height="300" src="" class="lozad" alt="Pictorial representation of a campaign like Contagious Interview. Digital graphic of a glowing globe with network connections and data streams, symbolizing global connectivity and technology advancements." data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/10/03_Nation-State-cyberattacks_1920x900-300x300.jpg" decoding="async" /> </figure> </a> <div class="card-content"> <div class="card-content__wrapper"> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/malware/" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Contagious Interview: DPRK Threat Actors Lure Tech Industry Job Seekers to Install New Variants of BeaverTail and InvisibleFerret Malware:Malware"><span class=""><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/malware.svg" alt=" category icon">Malware</span></a> <span class="post-pub-date"><time datetime="2024-10-09T10:00:54+00:00">October 9, 2024</time></span> <a href="https://unit42.paloaltonetworks.com/north-korean-threat-actors-lure-tech-job-seekers-as-fake-recruiters/" title="Contagious Interview: DPRK Threat Actors Lure Tech Industry Job Seekers to Install New Variants of BeaverTail and InvisibleFerret Malware" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Contagious Interview: DPRK Threat Actors Lure Tech Industry Job Seekers to Install New Variants of BeaverTail and InvisibleFerret Malware"> <h4 class="post-title">Contagious Interview: DPRK Threat Actors Lure Tech Industry Job Seekers to Install New Variants of BeaverTail and InvisibleFerret Malware</h4> </a> <ul class="card-tags" role="list"> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/north-korea/" title="North Korea" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Contagious Interview: DPRK Threat Actors Lure Tech Industry Job Seekers to Install New Variants of BeaverTail and InvisibleFerret Malware:North Korea">North Korea</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/social-engineering/" title="social engineering" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Contagious Interview: DPRK Threat Actors Lure Tech Industry Job Seekers to Install New Variants of BeaverTail and InvisibleFerret Malware:social engineering">Social engineering</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/python/" title="Python" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Contagious Interview: DPRK Threat Actors Lure Tech Industry Job Seekers to Install New Variants of BeaverTail and InvisibleFerret Malware:Python">Python</a> </li></ul> </div> <div class="card-content__link"> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/north-korean-threat-actors-lure-tech-job-seekers-as-fake-recruiters/" title="Read now" role="link" data-page-track="true" data-page-track-value="overview:threat-actor-groups:Contagious Interview: DPRK Threat Actors Lure Tech Industry Job Seekers to Install New Variants of BeaverTail and InvisibleFerret Malware:read now">Read now</a> </div> </div> </div> </div>  </div> </section> <section class="section section--trend-reports" id="trend-reports"> <div class="pa eip"> <div class="l-container"> <div class="cta-title"> <h3>Explore in-depth cybersecurity trend reports</h3> <a class="l-btn" href="/category/trend-reports" title="View All" target="" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:View All"> View All <img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/right-arrow.svg" alt="Right Arrow"> </a> </div> <div class="report__wrapper"> <div class="report-content"> <article> <span> Report </span> <a class="rc__title" href="https://www.paloaltonetworks.com/resources/ebooks/unit42-threat-frontier.html" title="The Unit 42 Threat Frontier: Prepare for Emerging AI Risks" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:The Unit 42 Threat Frontier: Prepare for Emerging AI Risks"> <h4>The Unit 42 Threat Frontier: Prepare for Emerging AI Risks</h4> </a> <div class="report-editor__content"> <p class="p1">Strengthen your grasp of generative AI (GenAI) and learn how attackers can go about compromising GenAI tools to support their efforts.</p> <p class="p1">Identify critical capabilities</p> <ul> <li class="p1">Learn why conventional cybersecurity tactics are still relevant when defending against AI-enabled attackers.</li> </ul> <p>Real examples</p> <ul> <li>We describe how Unit 42 red teams are using AI in our proactive security engagements.</li> </ul> <p>Extend your current understanding to the likely future and keep up with, or perhaps even outpace, attackers using AI.</p> <p> </p> </div> <a class="hyperlink" href="https://www.paloaltonetworks.com/resources/ebooks/unit42-threat-frontier.html" title="Get the report" target="" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:The Unit 42 Threat Frontier: Prepare for Emerging AI Risks:Get the report"> Get the report </a> </article> </div> <div class="report-image"> <picture> <img width="1190" height="1000" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/12/ThreatFrontierReport.webp" class="lozad" alt="Threat Frontier Report cover." decoding="async" data-srcset="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/12/ThreatFrontierReport.webp 1190w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/12/ThreatFrontierReport-524x440.webp 524w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/12/ThreatFrontierReport-833x700.webp 833w, https://unit42.paloaltonetworks.com/wp-content/uploads/2024/12/ThreatFrontierReport-768x645.webp 768w" sizes="(max-width: 1190px) 100vw, 1190px" /> </picture> </div> </div> </div> <div class="eip-report-cards"> <div class="eip-rc__wrapper"> <div class="pa l-card l-card--transparent" > <a href="https://unit42.paloaltonetworks.com/prepare-for-emerging-ai-risks-unit-42-threat-frontier/" data-page-track="true" data-page-track-value="overview:trend-reports:Unit 42 Looks Toward the Threat Frontier: Preparing for Emerging AI Risks:card" title="Unit 42 Looks Toward the Threat Frontier: Preparing for Emerging AI Risks" class="card-media " > <figure class="aspect-box" style="--aspect-ratio:217/212;" tabindex="0"> <img width="300" height="300" src="" class="lozad" alt="A pictorial representation of AI threats. Looking over the shoulder of a man in the cockpit of a vessel in space, the window looks out on an Earth-like planet." data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/10/AI-Threat-Report-Header-Image-Revision-300x300.jpg" decoding="async" /> </figure> </a> <div class="card-content"> <div class="card-content__wrapper"> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/security-technology/" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:Unit 42 Looks Toward the Threat Frontier: Preparing for Emerging AI Risks:Security Technology"><span class=""><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/security-technology.svg" alt=" category icon">Security Technology</span></a> <span class="post-pub-date"><time datetime="2024-10-16T10:30:21+00:00">October 16, 2024</time></span> <a href="https://unit42.paloaltonetworks.com/prepare-for-emerging-ai-risks-unit-42-threat-frontier/" title="Unit 42 Looks Toward the Threat Frontier: Preparing for Emerging AI Risks" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:Unit 42 Looks Toward the Threat Frontier: Preparing for Emerging AI Risks"> <h4 class="post-title">Unit 42 Looks Toward the Threat Frontier: Preparing for Emerging AI Risks</h4> </a> <ul class="card-tags" role="list"> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/genai/" title="GenAI" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:Unit 42 Looks Toward the Threat Frontier: Preparing for Emerging AI Risks:GenAI">GenAI</a> </li></ul> </div> <div class="card-content__link"> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/prepare-for-emerging-ai-risks-unit-42-threat-frontier/" title="Read now" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:Unit 42 Looks Toward the Threat Frontier: Preparing for Emerging AI Risks:read now">Read now</a> </div> </div> </div><div class="pa l-card l-card--transparent" > <a href="https://unit42.paloaltonetworks.com/2024-unit-42-attack-surface-threat-research-internet-connected-exposures/" data-page-track="true" data-page-track-value="overview:trend-reports:Unit 42 Attack Surface Threat Research: Over 23% of Internet-Connected Exposures Involve Critical IT and Security Infrastructure:card" title="Unit 42 Attack Surface Threat Research: Over 23% of Internet-Connected Exposures Involve Critical IT and Security Infrastructure" class="card-media " > <figure class="aspect-box" style="--aspect-ratio:217/212;" tabindex="0"> <img width="300" height="300" src="" class="lozad" alt="Pictorial representation of attack surface management. Close-up of a person wearing glasses with computer code reflections on the lenses." data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/08/12_Security-Technology_Category_1920x900-300x300.jpg" decoding="async" /> </figure> </a> <div class="card-content"> <div class="card-content__wrapper"> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/security-technology/" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:Unit 42 Attack Surface Threat Research: Over 23% of Internet-Connected Exposures Involve Critical IT and Security Infrastructure:Security Technology"><span class=""><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/security-technology.svg" alt=" category icon">Security Technology</span></a> <span class="post-pub-date"><time datetime="2024-08-14T13:00:37+00:00">August 14, 2024</time></span> <a href="https://unit42.paloaltonetworks.com/2024-unit-42-attack-surface-threat-research-internet-connected-exposures/" title="Unit 42 Attack Surface Threat Research: Over 23% of Internet-Connected Exposures Involve Critical IT and Security Infrastructure" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:Unit 42 Attack Surface Threat Research: Over 23% of Internet-Connected Exposures Involve Critical IT and Security Infrastructure"> <h4 class="post-title">Unit 42 Attack Surface Threat Research: Over 23% of Internet-Connected Exposures Involve Critical IT and Security Infrastructure</h4> </a> <ul class="card-tags" role="list"> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/attack-analysis/" title="attack analysis" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:Unit 42 Attack Surface Threat Research: Over 23% of Internet-Connected Exposures Involve Critical IT and Security Infrastructure:attack analysis">Attack analysis</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/media/" title="media" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:Unit 42 Attack Surface Threat Research: Over 23% of Internet-Connected Exposures Involve Critical IT and Security Infrastructure:media">Media</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/attack-surface-management/" title="attack surface management" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:Unit 42 Attack Surface Threat Research: Over 23% of Internet-Connected Exposures Involve Critical IT and Security Infrastructure:attack surface management">Attack surface management</a> </li></ul> </div> <div class="card-content__link"> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/2024-unit-42-attack-surface-threat-research-internet-connected-exposures/" title="Read now" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:Unit 42 Attack Surface Threat Research: Over 23% of Internet-Connected Exposures Involve Critical IT and Security Infrastructure:read now">Read now</a> </div> </div> </div><div class="pa l-card l-card--transparent" > <a href="https://unit42.paloaltonetworks.com/unit-42-ransomware-leak-site-data-analysis/" data-page-track="true" data-page-track-value="overview:trend-reports:Ransomware Review: First Half of 2024:card" title="Ransomware Review: First Half of 2024" class="card-media " > <figure class="aspect-box" style="--aspect-ratio:217/212;" tabindex="0"> <img width="300" height="300" src="" class="lozad" alt="Pictorial representation of ransomware activity in the first half of 2024. A digitial illustration of a lock made up of nodes glowing against a background of bokeh points." data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/02/03_Ransomware_Category_1920x900-300x300.jpg" decoding="async" /> </figure> </a> <div class="card-content"> <div class="card-content__wrapper"> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/ransomware/" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:Ransomware Review: First Half of 2024:Ransomware"><span class=""><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-ransomware.svg" alt=" category icon">Ransomware</span></a> <span class="post-pub-date"><time datetime="2024-08-09T10:00:03+00:00">August 9, 2024</time></span> <a href="https://unit42.paloaltonetworks.com/unit-42-ransomware-leak-site-data-analysis/" title="Ransomware Review: First Half of 2024" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:Ransomware Review: First Half of 2024"> <h4 class="post-title">Ransomware Review: First Half of 2024</h4> </a> <ul class="card-tags" role="list"> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/healthcare/" title="Healthcare" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:Ransomware Review: First Half of 2024:Healthcare">Healthcare</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/lockbit/" title="LockBit" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:Ransomware Review: First Half of 2024:LockBit">LockBit</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/ransomhub/" title="RansomHub" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:Ransomware Review: First Half of 2024:RansomHub">RansomHub</a> </li></ul> </div> <div class="card-content__link"> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/unit-42-ransomware-leak-site-data-analysis/" title="Read now" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:Ransomware Review: First Half of 2024:read now">Read now</a> </div> </div> </div><div class="pa l-card l-card--transparent" > <a href="https://unit42.paloaltonetworks.com/cloud-virtual-machine-attack-vectors/" data-page-track="true" data-page-track-value="overview:trend-reports:Attack Paths Into VMs in the Cloud:card" title="Attack Paths Into VMs in the Cloud" class="card-media " > <figure class="aspect-box" style="--aspect-ratio:217/212;" tabindex="0"> <img width="300" height="300" src="" class="lozad" alt="" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/unit42-cloud-attacks-300x300.jpg" decoding="async" /> </figure> </a> <div class="card-content"> <div class="card-content__wrapper"> <a class="card-category" href="https://unit42.paloaltonetworks.com/category/cloud-cybersecurity-research/" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:Attack Paths Into VMs in the Cloud:Cloud Cybersecurity Research"><span class=""><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/cloud-cybersecurity-research.svg" alt=" category icon">Cloud Cybersecurity Research</span></a> <span class="post-pub-date"><time datetime="2024-06-18T10:00:23+00:00">June 18, 2024</time></span> <a href="https://unit42.paloaltonetworks.com/cloud-virtual-machine-attack-vectors/" title="Attack Paths Into VMs in the Cloud" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:Attack Paths Into VMs in the Cloud"> <h4 class="post-title">Attack Paths Into VMs in the Cloud</h4> </a> <ul class="card-tags" role="list"> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/aws/" title="AWS" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:Attack Paths Into VMs in the Cloud:AWS">AWS</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/iaas/" title="IaaS" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:Attack Paths Into VMs in the Cloud:IaaS">IaaS</a> </li> <li role="listitem"> <a href="https://unit42.paloaltonetworks.com/tag/virtual-machines/" title="virtual machines" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:Attack Paths Into VMs in the Cloud:virtual machines">Virtual machines</a> </li></ul> </div> <div class="card-content__link"> <a class="hyperlink" href="https://unit42.paloaltonetworks.com/cloud-virtual-machine-attack-vectors/" title="Read now" role="link" data-page-track="true" data-page-track-value="overview:trend-reports:Attack Paths Into VMs in the Cloud:read now">Read now</a> </div> </div> </div> </div> </div> </div> </section> </div> <section class="section section--social-follow"> <div class="pa social-follow"> <div class="l-container"> <div class="social-follow__wrapper"> <img class="bg-logo lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/social-follow-bg-logo.svg" alt="Palo Alto BG logo"> <h4>Follow Unit 42 for breaking threat intelligence</h4> <ul> <li> <a href="https://twitter.com/Unit42_Intel" target="_blank" data-page-track="true" data-page-track-value="overview:Follow Unit 42:Twitter"><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/X_Icon.svg" alt="Twitter"></a></li> <li> <a href="https://www.linkedin.com/company/palo-alto-networks" target="_blank" data-page-track="true" data-page-track-value="overview:Follow Unit 42:Linked In"><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/LinkedIn_Icon.svg" alt="LinkedIn"></a></li> <li> <a href="https://www.youtube.com/user/paloaltonetworks" target="_blank" data-page-track="true" data-page-track-value="overview:Follow Unit 42:Youtube"><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/icon-youtube.svg" alt="Youtube"></a></li> <li> <a href="https://www.facebook.com/PaloAltoNetworks/" target="_blank" data-page-track="true" data-page-track-value="overview:Follow Unit 42:Facebook"><img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/Facebook_Icon.svg" alt="Facebook"></a></li> </ul> </div> </div> </div> </section> </main>  <div class="newsletter"> <div class="l-container"> <div class="newsletter__wrapper"> <div class="image__wrapper"> <picture> <source class="lozad" media="(max-width:400px)" data-srcset="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/newsletter-Image-mobile.webp"> <source class="lozad" media="(max-width:949px)" data-srcset="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/newsletter-Image-tab.webp"> <img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/Revitalized_newsletter-Image-desktop-copy-1.webp" alt="Newsletter"> </picture> </div> <div class="content__wrapper"> <span class="pre-title"> <img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/palo-alto-logo-small.svg" alt="UNIT 42 Small Logo"> Get updates from Unit 42 </span> <h2>Peace of mind comes from staying ahead of threats. Contact us today.</h2> <form action="https://www.paloaltonetworks.com/apps/pan/public/formsubmithandler.submitform.json" method="post" novalidate class="subscribe-form" name="Unit42_Subscribe" id="unit42footerSubscription_form"> <input type="hidden" name="emailFormMask" value=""> <input type="hidden" value="1086" name="formid"> <input type="hidden" value="531-OCS-018" name="munchkinId"> <input type="hidden" value="2141" name="lpId"> <input type="hidden" value="1203" name="programId"> <input type="hidden" value="1086" name="formVid"> <input type="hidden" name="mkto_optinunit42" value="true"> <input type="hidden" name="mkto_opt-in" value="true"> <div class="form-group"> <label for="newsletter-email" id="newsletter-email-label">Your Email</label> <input type="emal" placeholder="Your Email" name="Email" class="subscribe-field" id="newsletter-email" aria-labelledby="newsletter-email-label"> <p class="error-mail mb-15 text-danger" style="color: #dc3545"></p> <p>Subscribe for email updates to all Unit 42 threat research.<br />By submitting this form, you agree to our <a title="Terms of Use" href="https://www.paloaltonetworks.com/legal-notices/terms-of-use" data-page-track="true" data-page-track-value="Get updates from Unit 42:Terms of Use">Terms of Use</a> and acknowledge our <a title="Privacy Statement" href="https://www.paloaltonetworks.com/legal-notices/privacy" data-page-track="true" data-page-track-value="Get updates from Unit 42:Privacy Statement">Privacy Statement.</a></p> <div class="g-recaptcha" data-expired-callback="captchaExpires" data-callback="captchaComplete" data-sitekey="6Lc5EhgTAAAAAJa-DzE7EeWABasWg4LKv-R3ao6o"></div> <p class="error-recaptcha d-none mt-15 text-danger" style="color: #dc3545">Invalid captcha!</p> <button class="l-btn is-disabled" data-page-track="true" data-page-track-value="footer:Get updates from Unit 42:Subscribe" id="unit42footerSubscription_form_button"> Subscribe <img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/right-arrow.svg" alt="Right Arrow" class="arrow"> <img src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/icon-loader.svg" alt="loader" class="loader"> </button> <div class="form-success-message"></div> </div> </form> </div> </div> </div> </div> <script> (function($) { // Migrated from the unit42-v5 + Modifications var subscribeSuccess = false; var email = document.getElementById('newsletter-email'); var subscription_form = document.getElementById('unit42footerSubscription_form'); var subscription_form_button = document.getElementById('unit42footerSubscription_form_button'); window.captchaComplete = function() { subscribeSuccess = true; if ($(mail).val() != '' && isEmail($(mail).val())) { $(subscription_form_button).removeClass('is-disabled'); } setTimeout(function() { $(email).focus(); $('.g-recaptcha iframe').attr('tabindex', '-1'); }, 100) } window.captchaExpires = function() { subscribeSuccess = false; $(subscription_form_button).addClass('is-disabled', true); } $(subscription_form).submit(function(e) { e.preventDefault(); e.stopImmediatePropagation(); updateEmailMask(); var success = true; var form = $(this); var mail = form.find('input[name="Email"]'); if (mail.val() === '') { mail.addClass('has-error'); showError(1); success = false; } else if (!isEmail(mail.val())){ showError(2); success = false; } else { mail.removeClass('has-error'); $('.error-mail').addClass('d-none'); } if (!subscribeSuccess) { $('.error-recaptcha').removeClass('d-none'); } else { $('.error-recaptcha').addClass('d-none'); } if (success && subscribeSuccess) { $.ajax({ type: 'POST', url: form.attr('action'), data: form.serialize(), beforeSend: function() { form.find('button').addClass('is-loading'); }, success: function(msg) { form.find('.form-success-message').html('<p class="success-message">You have been successfully subscribed</p>'); form.find('button').removeClass('is-loading'); $(email).val(''); clearError(); }, error: function(jqXHR, textStatus, errorThrown) { $(subscription_form_button).addClass('is-disabled', true); form.find('button').removeClass('is-loading'); } }); } return false; }); function showError(error_type){ if(error_type == 1) { $('.error-mail').text("Please enter the email address.").addClass('error-show'); $(subscription_form_button).addClass('is-disabled'); } else if(error_type == 2){ $('.error-mail').text("Please provide a valid e-mail address.").addClass('error-show'); $(subscription_form_button).addClass('is-disabled'); } $(subscription_form_button).removeClass('is-loading'); } function clearError(){ $('.error-mail').text("").removeClass('error-show');; $(subscription_form_button).removeClass('is-loading'); $(subscription_form_button).removeClass('is-disabled'); } $(email).on('input', function (event) { var email = $(this).val(); if (isEmail(email) ) { clearError(); } else if(email == ""){ clearError(); } else{ showError(2); } }); function isEmail(email) { var re = /^(([^<>()\[\]\\.,;:\s@"]+(\.[^<>()\[\]\\.,;:\s@"]+)*)|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/; return re.test(String(email).toLowerCase()); } var captcha_loaded = false; if(!captcha_loaded){ // recaptcha on foucs call $(document).on('change paste keyup', '#newsletter-email', function () { if($('.g-recaptcha').hasClass('d-none')){ $('.g-recaptcha').removeClass('d-none'); } if(!captcha_loaded ){ captcha_loaded = true; // trigger loading api.js (recaptcha.js) script var head = document.getElementsByTagName('head')[0]; var script = document.createElement('script'); script.type = 'text/javascript'; script.src = 'https://www.google.com/recaptcha/api.js?hl=en_US'; head.appendChild(script); } }); } function updateEmailMask() { var email = $("#unit42footerSubscription_form input[name='Email']").val(); if (email && email.trim() != '') { var maskedEmail = maskEmailAddress(email); $("#unit42footerSubscription_form input[name='emailFormMask']").val(maskedEmail); } } function maskEmailAddress (emailAddress) { function mask(str) { var strLen = str.length; if (strLen > 4) { return str.substr(0, 1) + str.substr(1, strLen - 1).replace(/\w/g, '*') + str.substr(-1,1); } return str.replace(/\w/g, '*'); } return emailAddress.replace(/([\w.]+)@([\w.]+)(\.[\w.]+)/g, function (m, p1, p2, p3) { return mask(p1) + '@' + mask(p2) + p3; }); return emailAddress; } }(jQuery)); //# sourceMappingURL=main.js.map </script>  <footer class="footer"> <div class="footer-menu"> <div class="l-container"> <div class="footer-menu__wrapper"> <div class="footer-menu-nav__wrapper"> <h3 class="footer-menu-nav__title">Products and services</h3> <div class="nav-column__wrapper"> <div class="nav-column"> <nav> <ul class="footer-menu-nav__list"> <li class="footer-menu-nav__item nav-title"> <a href="https://www.paloaltonetworks.com/network-security" role="link" title="Network Security Platform" data-page-track="true" data-page-track-value="footer:Products and services:Network Security Platform">Network Security Platform</a> </li> <li class="footer-menu-nav__item nav-title"> <a href="https://www.paloaltonetworks.com/network-security/security-subscriptions" role="link" title="CLOUD DELIVERED SECURITY SERVICES" data-page-track="true" data-page-track-value="footer:Products and services:Network Security Platform:CLOUD DELIVERED SECURITY SERVICES">CLOUD DELIVERED SECURITY SERVICES</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/network-security/advanced-threat-prevention" target=_blank role="link" title="Advanced Threat Prevention" data-page-track="true" data-page-track-value="footer:Products and services:Network Security Platform:CLOUD DELIVERED SECURITY SERVICES:Advanced Threat Prevention">Advanced Threat Prevention</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/network-security/advanced-dns-security" role="link" title="DNS Security" data-page-track="true" data-page-track-value="footer:Products and services:Network Security Platform:CLOUD DELIVERED SECURITY SERVICES:Advanced Threat Prevention:DNS Security">DNS Security</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/network-security/enterprise-data-loss-prevention" role="link" title="Data Loss Prevention" data-page-track="true" data-page-track-value="footer:Products and services:Network Security Platform:CLOUD DELIVERED SECURITY SERVICES:Advanced Threat Prevention:DNS Security:Data Loss Prevention">Data Loss Prevention</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/network-security/enterprise-iot-security" role="link" title="IoT Security" data-page-track="true" data-page-track-value="footer:Products and services:Network Security Platform:CLOUD DELIVERED SECURITY SERVICES:Advanced Threat Prevention:DNS Security:Data Loss Prevention:IoT Security">IoT Security</a> </li> </ul> </nav> <nav> <ul class="footer-menu-nav__list"> <li class="footer-menu-nav__item nav-title"> <a href="https://www.paloaltonetworks.com/network-security/next-generation-firewall" role="link" title="Next-Generation Firewalls" data-page-track="true" data-page-track-value="footer:Products and services:Network Security Platform:CLOUD DELIVERED SECURITY SERVICES:Advanced Threat Prevention:DNS Security:Data Loss Prevention:IoT Security:Next-Generation Firewalls">Next-Generation Firewalls</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/network-security/next-generation-firewall-hardware" role="link" title="Hardware Firewalls" data-page-track="true" data-page-track-value="footer:Products and services:Network Security Platform:CLOUD DELIVERED SECURITY SERVICES:Advanced Threat Prevention:DNS Security:Data Loss Prevention:IoT Security:Next-Generation Firewalls:Hardware Firewalls">Hardware Firewalls</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/network-security/strata-cloud-manager" role="link" title="Strata Cloud Manager" data-page-track="true" data-page-track-value="footer:Products and services:Network Security Platform:CLOUD DELIVERED SECURITY SERVICES:Advanced Threat Prevention:DNS Security:Data Loss Prevention:IoT Security:Next-Generation Firewalls:Hardware Firewalls:Strata Cloud Manager">Strata Cloud Manager</a> </li> </ul> </nav> <nav> <ul class="footer-menu-nav__list"> <li class="footer-menu-nav__item nav-title"> <a href="https://www.paloaltonetworks.com/sase" role="link" title="SECURE ACCESS SERVICE EDGE" data-page-track="true" data-page-track-value="footer:Products and services:Network Security Platform:CLOUD DELIVERED SECURITY SERVICES:Advanced Threat Prevention:DNS Security:Data Loss Prevention:IoT Security:Next-Generation Firewalls:Hardware Firewalls:Strata Cloud Manager:SECURE ACCESS SERVICE EDGE">SECURE ACCESS SERVICE EDGE</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/sase/access" role="link" title="Prisma Access" data-page-track="true" data-page-track-value="footer:Products and services:Network Security Platform:CLOUD DELIVERED SECURITY SERVICES:Advanced Threat Prevention:DNS Security:Data Loss Prevention:IoT Security:Next-Generation Firewalls:Hardware Firewalls:Strata Cloud Manager:SECURE ACCESS SERVICE EDGE:Prisma Access">Prisma Access</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/sase/sd-wan" role="link" title="Prisma SD-WAN" data-page-track="true" data-page-track-value="footer:Products and services:Network Security Platform:CLOUD DELIVERED SECURITY SERVICES:Advanced Threat Prevention:DNS Security:Data Loss Prevention:IoT Security:Next-Generation Firewalls:Hardware Firewalls:Strata Cloud Manager:SECURE ACCESS SERVICE EDGE:Prisma Access:Prisma SD-WAN">Prisma SD-WAN</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/sase/adem" role="link" title="Autonomous Digital Experience Management" data-page-track="true" data-page-track-value="footer:Products and services:Network Security Platform:CLOUD DELIVERED SECURITY SERVICES:Advanced Threat Prevention:DNS Security:Data Loss Prevention:IoT Security:Next-Generation Firewalls:Hardware Firewalls:Strata Cloud Manager:SECURE ACCESS SERVICE EDGE:Prisma Access:Prisma SD-WAN:Autonomous Digital Experience Management">Autonomous Digital Experience Management</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/sase/next-gen-casb" role="link" title="Cloud Access Security Broker" data-page-track="true" data-page-track-value="footer:Products and services:Network Security Platform:CLOUD DELIVERED SECURITY SERVICES:Advanced Threat Prevention:DNS Security:Data Loss Prevention:IoT Security:Next-Generation Firewalls:Hardware Firewalls:Strata Cloud Manager:SECURE ACCESS SERVICE EDGE:Prisma Access:Prisma SD-WAN:Autonomous Digital Experience Management:Cloud Access Security Broker">Cloud Access Security Broker</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/sase/ztna" role="link" title="Zero Trust Network Access" data-page-track="true" data-page-track-value="footer:Products and services:Network Security Platform:CLOUD DELIVERED SECURITY SERVICES:Advanced Threat Prevention:DNS Security:Data Loss Prevention:IoT Security:Next-Generation Firewalls:Hardware Firewalls:Strata Cloud Manager:SECURE ACCESS SERVICE EDGE:Prisma Access:Prisma SD-WAN:Autonomous Digital Experience Management:Cloud Access Security Broker:Zero Trust Network Access">Zero Trust Network Access</a> </li> </ul> </nav> </div> <div class="nav-column"> <nav> <ul class="footer-menu-nav__list"> <li class="footer-menu-nav__item nav-title"> <a href="https://www.paloaltonetworks.com/cortex/cloud" role="link" title="Cloud Security" data-page-track="true" data-page-track-value="footer:Products and services:Cloud Security">Cloud Security</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/cortex/cloud" role="link" title="Cortex Cloud" data-page-track="true" data-page-track-value="footer:Products and services:Cloud Security:Cortex Cloud">Cortex Cloud</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/prisma/cloud" role="link" title="Prisma Cloud" data-page-track="true" data-page-track-value="footer:Products and services:Cloud Security:Cortex Cloud:Prisma Cloud">Prisma Cloud</a> </li> </ul> </nav> </div> <div class="nav-column"> <nav> <ul class="footer-menu-nav__list"> <li class="footer-menu-nav__item nav-title"> <a href="https://www.paloaltonetworks.com/cortex" target=_blank role="link" title="AI-Driven Security Operations Platform" data-page-track="true" data-page-track-value="footer:Products and services:AI-Driven Security Operations Platform">AI-Driven Security Operations Platform</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/cortex/cortex-xdr" role="link" title="Cortex XDR" data-page-track="true" data-page-track-value="footer:Products and services:AI-Driven Security Operations Platform:Cortex XDR">Cortex XDR</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/cortex/cortex-xsoar" role="link" title="Cortex XSOAR" data-page-track="true" data-page-track-value="footer:Products and services:AI-Driven Security Operations Platform:Cortex XDR:Cortex XSOAR">Cortex XSOAR</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/cortex/cortex-xpanse" role="link" title="Cortex Xpanse" data-page-track="true" data-page-track-value="footer:Products and services:AI-Driven Security Operations Platform:Cortex XDR:Cortex XSOAR:Cortex Xpanse">Cortex Xpanse</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/cortex/cortex-xsiam" role="link" title="Cortex XSIAM" data-page-track="true" data-page-track-value="footer:Products and services:AI-Driven Security Operations Platform:Cortex XDR:Cortex XSOAR:Cortex Xpanse:Cortex XSIAM">Cortex XSIAM</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/cortex/cortex-xpanse/attack-surface-management" role="link" title="External Attack Surface Protection" data-page-track="true" data-page-track-value="footer:Products and services:AI-Driven Security Operations Platform:Cortex XDR:Cortex XSOAR:Cortex Xpanse:Cortex XSIAM:External Attack Surface Protection">External Attack Surface Protection</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/cortex/security-operations-automation" role="link" title="Security Automation" data-page-track="true" data-page-track-value="footer:Products and services:AI-Driven Security Operations Platform:Cortex XDR:Cortex XSOAR:Cortex Xpanse:Cortex XSIAM:External Attack Surface Protection:Security Automation">Security Automation</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/cortex/detection-and-response" role="link" title="Threat Prevention, Detection & Response" data-page-track="true" data-page-track-value="footer:Products and services:AI-Driven Security Operations Platform:Cortex XDR:Cortex XSOAR:Cortex Xpanse:Cortex XSIAM:External Attack Surface Protection:Security Automation:Threat Prevention, Detection & Response">Threat Prevention, Detection & Response</a> </li> </ul> </nav> </div> <div class="nav-column"> <nav> <ul class="footer-menu-nav__list"> <li class="footer-menu-nav__item nav-title"> <a href="https://www.paloaltonetworks.com/unit42" role="link" title="Threat Intel and Incident Response Services" data-page-track="true" data-page-track-value="footer:Products and services:Threat Intel and Incident Response Services">Threat Intel and Incident Response Services</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/unit42/assess" role="link" title="Proactive Assessments" data-page-track="true" data-page-track-value="footer:Products and services:Threat Intel and Incident Response Services:Proactive Assessments">Proactive Assessments</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/unit42/respond" role="link" title="Incident Response" data-page-track="true" data-page-track-value="footer:Products and services:Threat Intel and Incident Response Services:Proactive Assessments:Incident Response">Incident Response</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/unit42/transform" role="link" title="Transform Your Security Strategy" data-page-track="true" data-page-track-value="footer:Products and services:Threat Intel and Incident Response Services:Proactive Assessments:Incident Response:Transform Your Security Strategy">Transform Your Security Strategy</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/unit42/threat-intelligence-partners" role="link" title="Discover Threat Intelligence" data-page-track="true" data-page-track-value="footer:Products and services:Threat Intel and Incident Response Services:Proactive Assessments:Incident Response:Transform Your Security Strategy:Discover Threat Intelligence">Discover Threat Intelligence</a> </li> </ul> </nav> </div> </div> </div> <div class="footer-menu-nav__wrapper"> <h3 class="footer-menu-nav__title">Company</h3> <div class="nav-column__wrapper"> <div class="nav-column"> <nav> <ul class="footer-menu-nav__list"> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/about-us" role="link" title="About Us" data-page-track="true" data-page-track-value="footer:Company:About Us">About Us</a> </li> <li class="footer-menu-nav__item "> <a href="https://jobs.paloaltonetworks.com/en/" role="link" title="Careers" data-page-track="true" data-page-track-value="footer:Company:About Us:Careers">Careers</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/company/contact-sales" role="link" title="Contact Us" data-page-track="true" data-page-track-value="footer:Company:About Us:Careers:Contact Us">Contact Us</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/about-us/corporate-responsibility" role="link" title="Corporate Responsibility" data-page-track="true" data-page-track-value="footer:Company:About Us:Careers:Contact Us:Corporate Responsibility">Corporate Responsibility</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/customers" role="link" title="Customers" data-page-track="true" data-page-track-value="footer:Company:About Us:Careers:Contact Us:Corporate Responsibility:Customers">Customers</a> </li> <li class="footer-menu-nav__item "> <a href="https://investors.paloaltonetworks.com/" target=_blank role="link" title="Investor Relations" data-page-track="true" data-page-track-value="footer:Company:About Us:Careers:Contact Us:Corporate Responsibility:Customers:Investor Relations">Investor Relations</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/about-us/locations" role="link" title="Location" data-page-track="true" data-page-track-value="footer:Company:About Us:Careers:Contact Us:Corporate Responsibility:Customers:Investor Relations:Location">Location</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/company/newsroom" role="link" title="Newsroom" data-page-track="true" data-page-track-value="footer:Company:About Us:Careers:Contact Us:Corporate Responsibility:Customers:Investor Relations:Location:Newsroom">Newsroom</a> </li> </ul> </nav> </div> </div> </div> <div class="footer-menu-nav__wrapper"> <h3 class="footer-menu-nav__title">Popular links</h3> <div class="nav-column__wrapper"> <div class="nav-column"> <nav> <ul class="footer-menu-nav__list"> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/blog/" role="link" title="Blog" data-page-track="true" data-page-track-value="footer:Popular links:Blog">Blog</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/communities" role="link" title="Communities" data-page-track="true" data-page-track-value="footer:Popular links:Blog:Communities">Communities</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/resources" role="link" title="Content Library" data-page-track="true" data-page-track-value="footer:Popular links:Blog:Communities:Content Library">Content Library</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/cyberpedia" role="link" title="Cyberpedia" data-page-track="true" data-page-track-value="footer:Popular links:Blog:Communities:Content Library:Cyberpedia">Cyberpedia</a> </li> <li class="footer-menu-nav__item "> <a href="https://events.paloaltonetworks.com/" role="link" title="Event Center" data-page-track="true" data-page-track-value="footer:Popular links:Blog:Communities:Content Library:Cyberpedia:Event Center">Event Center</a> </li> <li class="footer-menu-nav__item "> <a href="https://start.paloaltonetworks.com/preference-center" role="link" title="Manage Email Preferences" data-page-track="true" data-page-track-value="footer:Popular links:Blog:Communities:Content Library:Cyberpedia:Event Center:Manage Email Preferences">Manage Email Preferences</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/products/products-a-z" role="link" title="Products A-Z" data-page-track="true" data-page-track-value="footer:Popular links:Blog:Communities:Content Library:Cyberpedia:Event Center:Manage Email Preferences:Products A-Z">Products A-Z</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/legal-notices/trust-center/tech-certs" role="link" title="Product Certifications" data-page-track="true" data-page-track-value="footer:Popular links:Blog:Communities:Content Library:Cyberpedia:Event Center:Manage Email Preferences:Products A-Z:Product Certifications">Product Certifications</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/security-disclosure" role="link" title="Report a Vulnerability" data-page-track="true" data-page-track-value="footer:Popular links:Blog:Communities:Content Library:Cyberpedia:Event Center:Manage Email Preferences:Products A-Z:Product Certifications:Report a Vulnerability">Report a Vulnerability</a> </li> <li class="footer-menu-nav__item "> <a href="https://www.paloaltonetworks.com/sitemap" role="link" title="Sitemap" data-page-track="true" data-page-track-value="footer:Popular links:Blog:Communities:Content Library:Cyberpedia:Event Center:Manage Email Preferences:Products A-Z:Product Certifications:Report a Vulnerability:Sitemap">Sitemap</a> </li> <li class="footer-menu-nav__item "> <a href="https://docs.paloaltonetworks.com/" role="link" title="Tech Docs" data-page-track="true" data-page-track-value="footer:Popular links:Blog:Communities:Content Library:Cyberpedia:Event Center:Manage Email Preferences:Products A-Z:Product Certifications:Report a Vulnerability:Sitemap:Tech Docs">Tech Docs</a> </li> <li class="footer-menu-nav__item "> <a href="https://unit42.paloaltonetworks.com/" role="link" title="Unit 42" data-page-track="true" data-page-track-value="footer:Popular links:Blog:Communities:Content Library:Cyberpedia:Event Center:Manage Email Preferences:Products A-Z:Product Certifications:Report a Vulnerability:Sitemap:Tech Docs:Unit 42">Unit 42</a> </li> <li class="footer-menu-nav__item do-not-sell-link"> <a href="https://panwedd.exterro.net/portal/dsar.htm?target=panwedd" target=_blank role="link" title="Do Not Sell or Share My Personal Information" data-page-track="true" data-page-track-value="footer:Popular links:Blog:Communities:Content Library:Cyberpedia:Event Center:Manage Email Preferences:Products A-Z:Product Certifications:Report a Vulnerability:Sitemap:Tech Docs:Unit 42:Do Not Sell or Share My Personal Information">Do Not Sell or Share My Personal Information</a> </li> </ul> </nav> </div> </div> </div> </div> </div> </div> <div class="footer-bottom"> <div class="l-container"> <div class="footer-logo"> <a href="https://www.paloaltonetworks.com/" role="link" title="Footer Nav" data-page-track="true" data-page-track-value="footer:logo:Palo Alto Networks"> <img width="245" height="46" src="https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/palo-alto-footer-logo.svg" class="attachment-medium size-medium" alt="" decoding="async" loading="lazy" /> </a> </div> <div class="footer-bottom__wrapper"> <div class="footer-bottom-nav"> <nav> <ul class="footer-menu-nav__list"> <li> <a href="https://www.paloaltonetworks.com/legal-notices/privacy" role="link" title="Privacy" data-page-track="true" data-page-track-value="footer:bottom-menu:Privacy">Privacy</a> </li> <li> <a href="https://www.paloaltonetworks.com/legal-notices/trust-center" role="link" title="Trust Center" data-page-track="true" data-page-track-value="footer:bottom-menu:Trust Center">Trust Center</a> </li> <li> <a href="https://www.paloaltonetworks.com/legal-notices/terms-of-use" role="link" title="Terms of Use" data-page-track="true" data-page-track-value="footer:bottom-menu:Terms of Use">Terms of Use</a> </li> <li> <a href="https://www.paloaltonetworks.com/legal" role="link" title="Documents" data-page-track="true" data-page-track-value="footer:bottom-menu:Documents">Documents</a> </li> </ul> </nav> <br/><span class="copyright">Copyright © 2025 Palo Alto Networks. All Rights Reserved</span> </div> <div class="footer-bottom-social"> <ul> <li> <a href="https://www.youtube.com/user/paloaltonetworks" target="_blank" role="link" title="YouTube" data-page-track="true" data-page-track-value="footer:social:Youtube"> <img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/youtube-black.svg" alt="YouTube"> </a> </li> <li> <a href="https://twitter.com/Unit42_Intel" target="_blank" role="link" title="X" data-page-track="true" data-page-track-value="footer:social::Twitter"> <img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/x-icon-black.svg" alt="Twitter"> </a> </li> <li> <a href="https://www.facebook.com/PaloAltoNetworks/" target="_blank" role="link" title="Facebook" data-page-track="true" data-page-track-value="footer:social:Facebook"> <img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/Facebook_Icon.svg" alt="Facebook"> </a> </li> <li> <a href="https://www.linkedin.com/company/palo-alto-networks" target="_blank" role="link" title="LinkedIn" data-page-track="true" data-page-track-value="footer:social:LinkedIn"> <img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/LinkedIn_Icon.svg" alt="LinkedIn"> </a> </li> <li> <a href="https://unit42.paloaltonetworks.com/unit-42-threat-vector-podcast/" role="link" title="Podcast" data-page-track="true" data-page-track-value="footer:social:Podcast"> <img class="lozad" data-src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/Podcast.svg" alt="Podcast"> </a> </li> </ul> <div class="pa language-dropdown"> <div class="language-dropdown__wrapper"> <img src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/globe-icon.svg" alt="Globe icon"> <span id="selectedLanguage">EN</span> <img src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/down-arrow.svg" alt="Down arrow"><ul><li class="title">Select your language</li> <li class="selected" data-value="en"> <a data-page-track="true" data-page-track-value="footer:language-selector:en" href="https://unit42.paloaltonetworks.com/">USA (ENGLISH)</a> </li> <li class="non-active" data-value="en"> <a data-page-track="true" data-page-track-value="footer:language-selector:ja" href="https://unit42.paloaltonetworks.jp/">JAPAN (日本語)</a> </li></ul> </div> </div> </div> </div> </footer> <div class="dd-overlay"> </div>  <div class="modal video__modal" id="videoModal" tabindex="-1"> <div class="modal__video-wrapper"> <button class="modal__play-btn is-minimized is-paused" id="playPauseBtn"> <img class="play" src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/player-play-icon.svg" alt="Play"> <img class="pause" src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/player-pause-icon1.svg" alt="Pause"> </button> <button class="modal__minimize-btn is-minimized"> <img src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/icon-minimize.svg" alt="Minimize"> </button> <button class="modal__close"> <img src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/close-modal.svg" alt="Close button"> </button> <video class="modal__video" id="customVideo"> <source src="" type="video/mp4">Your browser does not support the video tag. </video> <div class="modal__post-details" tabindex="-1"> <h3>Default Heading</h3> <a class="l-btn" href="#" title="Right Arrow Icon" role="link" data-page-track="true" data-page-track-value="overview:explore reports:View all reports">Read the article <img src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/right-arrow.svg" alt="Right Arrow"> </a> </div> <div class="modal__video-controls"> <div class="modal__video-seekbar input__wrapper"><span></span> <label class="is-hidden" for="modalSeekBar">Seekbar</label> <input class="custom-range" id="modalSeekBar" type="range" min="0" max="100" value="1"> <p class="modal__remaining-time"></p> </div> <button class="modal__play-btn is-paused" id="playPauseBtn"> <img class="play" src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/player-play-icon.svg" alt="Play"> <img class="pause" src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/player-pause-icon1.svg" alt="Pause"> </button> <div class="modal__volume-controls"> <div class="modal__volume__wrapper"> <button tabindex="0"> <img src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/icon-volume.svg" alt="Volume"> </button> <div class="modal__volume-seekbar"><span></span> <label class="is-hidden" for="volumeBar">Volume</label> <input class="volume__bar" id="volumeBar" type="range" min="0" max="1" step="0.1" value="0.7"> </div> </div> <button class="modal__minimize-btn" id="minimizeBtn"> <img src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/icon-minimize.svg" alt="Minimize"> </button> </div> </div> </div> </div> <script type="text/javascript"> var isProcessing = false; function alter_ul_post_values(obj,post_id,ul_type){ if (isProcessing) return; isProcessing = true; var like_nonce = jQuery('#_wpnonce').val(); jQuery(obj).find("span").html(".."); jQuery.ajax({ type: "POST", url: "https://unit42.paloaltonetworks.com/wp-content/plugins/like-dislike-counter-for-posts-pages-and-comments/ajax_counter.php", data: "post_id="+post_id+"&up_type="+ul_type+"&ul_nonce="+like_nonce, success: function(msg){ jQuery(obj).find("span").html(msg); isProcessing = false; jQuery(obj).find('svg').children('path').attr('stroke','#0050FF'); jQuery(obj).removeClass('idc_ul_cont_not_liked idc_ul_cont_not_liked_inner'); } }); } </script> <link rel='stylesheet' id='wpdevart_lightbox_front_end_css-css' href='https://unit42.paloaltonetworks.com/wp-content/plugins/lightbox-popup/includes/style/wpdevart_lightbox_front.css?ver=6.7.1' media='all' /> <script src="https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/js/script.js?ver=1.0.0" id="unit42-v6-navigation-js"></script>  <script type="text/javascript"> const observer_lozad = lozad('.lozad, .lozad-background'); // lazy loads elements with default selector as '.lozad' observer_lozad.observe(); function noSell(event) { event.preventDefault(); if (( typeof OneTrust != 'undefined') && (!!OneTrust)) { OneTrust.ToggleInfoDisplay(); }else{ var href = event.target.getAttribute('href'); window.open(href, '_blank'); } } window.PAN_Clean_Util = { isIE: false }; (function () { // INP Util Fix function yieldToMain(ms) { return new Promise(resolve => setTimeout(resolve, ms)); } window.PAN_Clean_Util.yieldToMain = yieldToMain })(); if(referer == "CloudCortex" || referer == "Prisma" || referer == "Cortex" || referer == "Sase" || referer == "Unit" || referer == "Ngfw"){ var Coveo_organizationId = "paloaltonetworksintranet"; var techDocsPagePath = "https://docs.paloaltonetworks.com/search.html#hd=All%20Prisma%20Cloud%20Documentation&hq=%40panproductcategory%3D%3D(%22Prisma%20Cloud%22)&sort=relevancy&layout=card&numberOfResults=25"; var languageFromPath="en_US"; window.Granite = window.Granite || {}; Granite.I18n = (function() { var self = {}; self.setLocale = function(locale) { }; self.get = function(text, snippets, note) { var out = ""; if(text){ if(text ==="coveo.clear"){ out = "Clear"; }else if(text ==="coveo.noresultsfound"){ out = "No results found for this search term."; } } return out; }; return self }()); } var main_site_critical_top = maindomain_lang+'/etc.clientlibs/panClean/components/mainNavigationComp/clientlibs/panClean/criticalTop.min.js'; var main_site_defered = maindomain_lang+'/etc.clientlibs/panClean/components/mainNavigationComp/clientlibs/panClean/defered.min.js'; var main_site_criticalTopBase = maindomain_lang+'/etc.clientlibs/panClean/components/mainNavigationComp/clientlibs/panClean/criticalTopBase.min.js'; var main_site_criticalTopProductNav = maindomain_lang+'/etc.clientlibs/panClean/components/mainNavigationComp/clientlibs/panClean/criticalTopProductNav.min.js'; window.PAN_MainNavAsyncUrl = maindomain_lang+"/_jcr_content/globals/cleanHeaderPrisma.prismaRenderer.html"; function loadScript(url, defer){ var script1 = document.createElement('script'); script1.setAttribute('type', 'text/javascript'); script1.setAttribute('src',url); if(defer == true){ script1.setAttribute('defer','defer'); } document.head.appendChild(script1); } function loadScript1(url, callback){ var script = document.createElement("script") script.type = "text/javascript"; if (script.readyState){ //IE script.onreadystatechange = function(){ if (script.readyState == "loaded" || script.readyState == "complete"){ script.onreadystatechange = null; callback(); } }; } else { //Others script.onload = function(){ callback(); }; } script.src = url; document.getElementsByTagName("head")[0].appendChild(script); } if(referer == "CloudCortex" || referer == "Prisma" || referer == "Cortex" || referer == "Sase" || referer == "Unit" || referer == "Ngfw"){ if(referer == "Unit"){ setTimeout(function(){ loadScript(main_site_criticalTopBase, false); loadScript1(main_site_criticalTopProductNav, function(){ window.PAN_initializeProduct2021Nav(); }); loadScript(main_site_defered, false); }, 3000); } else{ setTimeout(function(){ loadScript1(main_site_critical_top, function(){ window.PAN_initializeProduct2021Nav(); }); loadScript(main_site_defered, false); }, 3000); } } $(document).ready(function () { setTimeout(function(){ $('.article-banner .ab__options ul li a').each(function(){ $(this).attr('target', "_blank"); }); }, 4000); $( ".do-not-sell-link a" ).on( "click", function( event ) { noSell(event); }); }); </script>  </body> </html>

CINXE.COM

Unit 42 - Latest Cybersecurity Research | Palo Alto Networks