The Rise of Infostealers: How Digital Identity Theft Fuels the Cybercrime Economy
August 29, 2025 This blog is brought to you by a research collaboration with our CTI colleagues and friends at LastPass.
Archive
GRITREP: Observed Malicious Driver Use Associated with Akira SonicWall Campaign
August 5, 2025 Bottom-Line Up Front (BLUF): We have observed Akira affiliates exploiting two common drivers as part of a suspected AV/EDR evasion effort following initial access involving SonicWall ab…
Insights from the GRIT Q2 2025 Ransomware & Cyber Threat Report
July 10, 2025 Ransomware continues to escalate, driving a more fragmented and aggressive threat landscape.
Interlock Intrusion: How Interlock Achieves Encryption
May 8, 2025 Background Organizations often call on GuidePoint Security analysts to support and consult on Digital Forensics and Incident Response (DFIR) efforts, focusing on remediation, recovery, and…
Insights from the GRIT 2025 Q1 Ransomware & Cyber Threat Report
April 10, 2025 Ransomware continues to surge, reshaping the threat landscape.
RansomSnub: RansomHub’s Affiliate Confusion
April 8, 2025 Executive Summary Since RansomHub’s emergence in early 2024, the group has become the most prolific Ransomware-as-a-Service group operating today.
Breaking Basta: Insights from Black Basta’s Leaked Ransomware Chats
March 6, 2025 Key Takeaways During the period covered by the Black Basta leaked chat logs (18 September 2023 – 28 September 2024), we observed the following We observed at least 47 cryptocurrency wa…
Snail Mail Fail: Fake Ransom Note Campaign Preys on Fear
March 4, 2025 In early March 2025, GRIT received reports from multiple organizations regarding suspicious physical letters delivered by mail from US addresses to members of their executive team.
GRIT’s 2025 Report: Ransomware Group Dynamics and Case Studies
February 18, 2025 Ransomware threats continue evolving, with the most successful groups refining their tactics to maximize impact over the last year.
GRIT’s 2025 Report: Annual Vulnerability Analysis and Exploitation Trends
February 4, 2025 2024 saw an unprecedented surge in vulnerability disclosures, with over 39,000 vulnerabilities published.
Ongoing report: Babuk2 (Babuk-Bjorka)
January 29, 2025 Editor’s note: We will continue to provide updates as further information is forthcoming.
GRIT’s 2025 Report: Post-Compromise Detection Strategies
January 28, 2025 This blog marks the beginning of a series based on the findings in the GRIT 2025 Ransomware and Cyber Threat Report.