APT41 is a prolific Chinese cyber threat group that carries out state-sponsored espionage activity.

Threat actors with varying motivations are actively exploiting the current pandemic and public fear of the coronavirus and COVID-19.

Incorporates industry-leading threat intelligence reporting, real-world case studies from frontline Mandiant experts

Mandiant Digital Threat Monitoring now includes the capability to monitor your credential leaks on the deep and dark web.

It's the one year anniversary of the SolarWinds compromise, and we remain  committed to tracking the threat actors involved in this attack.

Mandiant Threat Intelligence has tracked several loader and backdoor campaigns that lead to the post-compromise deployment of ransomware.

FireEye researchers recently observed threat actors abusing CVE-2017-10271 to deliver various cryptocurrency miners.

Today we are releasing a report on APT43, a prolific threat actor operating on behalf of the North Korean regime.

UNC2596 has been observed exploiting vulnerabilities to deliver COLDDRAW, a threat known publicly as Cuba Ransomware.

This offering provides awareness to senior leaders on impacts of cyber threats to businesses to inform risk-based decision making.