Threat researchFollowing the refund: how fake South African government sites led to
7 steps in a repeatable reverse engineering workflow 7 static indicators to
6 repetitive malware analysis tasks an AI agent can take over 30–90
Detection highlights · September 2026FlowerStorm phishing kit, ETW tampering and 70+ new
60% Time saved with automated behavioral detection vs. manual analysis 2–5 min
Introduction 2026 has already been an exciting year for VMRay, with three
This is the story of a hunt: how a pile of 276
2 decision types: message vs. threat 4 foundations of effective phishing
// VMRAY LABS · THREAT RESEARCH What indicators miss: geo-aware malware and
The Labs team at VMRay actively gathers publicly available data to identify
In the first post, we set up VMRay UniqueSignal as a feed
Threat Intelligence Spotlight Executive Summary VMRay Labs has analyzed a family of
Every Agent Needs an Oracle 01 Abstract Detection rules are increasingly drafted
The Labs team at VMRay actively gathers publicly available data to identify
9 malware analysis platforms and services compared 6 layers of trust in
STIX and TAXII solve an important problem: moving cyber threat intelligence between
Security teams do not have an IOC shortage. They have an IOC
Executive Summary VMRay Labs identified a previously unattributed, actively operated cybercriminal campaign
The Labs team at VMRay actively gathers publicly available data to identify
TL;DR / Fast Answer Incident Response (IR) and Detection Engineering (DE) are
TL;DR / Fast Answer Reliance on a single security control is a
TL;DR / Fast Answer Generic threat intelligence feeds often lack the specific
TL;DR / Fast Answer Effective Cyber Threat Intelligence (CTI) is more than
TL;DR / Fast Answer Not all data found during malware analysis is
Introduction Since the release of VMRay Platform 2026.2, we’ve had a busy
2standards working together: STIX and TAXII 4core building blocks that make up
Introduction Most threat intelligence work begins with a feed. Platforms like VMRay
Operationalizing VMRay UniqueSignal in MISP for detection, hunting and blocking In the
Integrating UniqueSignal with OpenCTI Using STIX/TAXII 2.1 OpenCTI is one of the
The Labs team at VMRay actively gathers publicly available data to identify
Keep up to date with our weekly digest of articles. Get the latest news, invites to events, and threat alerts!
