Cyber Threat Intelligence from BlackBerry

The BlackBerry Threat Research and Intelligence team works 24x7x365 to hold the line against threat actors and cyberattacks, identifying and stopping threats no one has ever seen before.

Subscribe to get our latest threat research and intelligence and stay up to date on recent attacks.

BlackBerry Global Threat Intelligence Report — September 2024 Edition

The latest report from the BlackBerry Threat Research and Intelligence Team – covering April through June, 2024 – notes a 53% increase in unique malware, per day, over the previous period. The report also features insights from the Royal Canadian Mounted Police’s National Cybercrime Coordination Centre (NC3) on the growing threat of ransomware in Canada.

Get the Report Watch the Webinar

Confronting Digital Deception

BlackBerry's Essential White Paper on Deepfakes

Dive into the evolution and challenges of deepfakes. In the paper, you’ll learn:

How advanced AI algorithms create hyper-realistic multimedia content both to entertain and to deceive.
The importance of user empowerment to mitigate these threats.
Valuable insights on safeguarding organizations for leaders navigating the complexities of this technology.

Read the Paper

Recent BlackBerry Threat Research and Intelligence Alerts

Suspected Nation-State Adversary Targets Pakistan Navy in Cyber Espionage Campaign

The BlackBerry Threat Research and Intelligence team continuously monitors cyber activities across the globe. In this case, we came across an interesting PDF lure which appeared to be an internal IT communication for the Pakistan Navy. As we pivoted off this artifact and followed its digital footprints, we came across a web of interlinking infrastructure, and artifacts of various filetypes, that appear to have an espionage theme.

Discover More

LightSpy: APT41 Deploys Advanced DeepData Framework In Targeted Southern Asia Espionage Campaign

BlackBerry identified a significant evolution in the LightSpy malware campaign, demonstrating enhanced capabilities and data theft mechanisms. The threat actor behind LightSpy, who we believe with a high level of confidence is associated with Chinese cyber-espionage group APT41, has now expanded their toolset to include a modular Windows-based surveillance framework that significantly broadens their espionage capabilities.

Learn More

Lynx on the Prowl: Targeting SMBs with Double-Extortion Tactics

The BlackBerry Threat Research and Intelligence Team noticed increasing activity by a newer ransomware group dubbed “Lynx.” The threat group claims to operate “ethically” by not targeting hospitals, governmental organizations, or nonprofits and instead targeting small and medium-sized businesses across a variety of industries. Further research revealed Lynx shares near-identical static code structure with another known ransomware.

Global Threat Intelligence Report Deep Dive | September 2024 Edition

Explore key findings of the September 2024 Global Threat Intelligence Report with Ismael Valenzuela, BlackBerry Vice President of Threat Research and Intelligence, and Cesar Vargas, BlackBerry Director of Applied Research. They share cyberthreat trends impacting our organizations and mitigation strategies to reduce risk.

View Webinar Now

Recent Cyberattack Trends

Which types of cyberattacks are most prevalent right now and how do they unfold? This is your opportunity to hear from the CylanceMDR (managed detection and response) Team and the BlackBerry Incident Response Team as they answer these questions. Plus, they share what organizations are doing that put them at greater risk of a successful attack.

View Webinar Now