Resources / Threat intelligence
Evidence-led intelligence and technical analysis created to clarify adversary behavior, attack paths and the defensive decisions that follow.
Cyber Struggle Delta
Each report turns collected artifacts and observed behavior into a structured record of targeting, tradecraft, technical execution and defensive relevance.
TLP: AMBER
An intelligence and forensic assessment of a persistent threat group targeting cryptocurrency exchanges worldwide through reconnaissance, spear-phishing and custom malware.
UNCLASSIFIED
Malware analysis of a campaign targeting the South Korean Unification Ministry, covering information collection, suspected remote command execution and anti-analysis behavior.
TECHNICAL ANALYSIS
Technical analysis of a malicious Word document used against financial organizations and cryptocurrency exchanges to exploit Adobe Flash and deliver a second-stage implant.
From artifact to action
The archive preserves technical findings and operational context so defenders can recognize patterns, test assumptions and improve future readiness.