Ursnif Malware — Italian Tax Agency lure
Ursnif campaign abusing the Italian Tax Agency (Agenzia delle Entrate) brand as social-engineering lure: Italian-language phishing templates and host indicators.
Blog · research & analysis
Latest analysis
Read the analysis
Handling the Microsoft Exchange Server cyber attack — why it can be worse than WannaCry
Mass exploitation of ProxyLogon (CVE-2021-26855/26857/26858/27065) on Microsoft Exchange Server: web shell hunting, two distinct intrusion sets observed in Italy, defensive guidance and post-compromise containment.
PurpleFox: analysis of the compromise chain
PurpleFox malware framework: rootkit components, MSI installer abuse, exploit-driven worm capabilities and lateral movement patterns observed in Italian intrusions.
Security considerations — Cloud E-mail
Security trade-offs of moving corporate email to cloud platforms (Microsoft 365, Google Workspace): attack surface, account takeover patterns, MFA hardening and detection requirements.
Mapping a cyber attack — the Italian case
Mapping a real Italian intrusion onto the MITRE ATT&CK framework: phases, techniques, telemetry sources and lessons for SOC detection-engineering.
50 000 companies compromised, 700 Italian organisations among them
Mass compromise impacting 50 000 organisations globally with 700 Italian entities affected: scope, exploitation chain and defensive priorities.
Cyber Defence: 3 priorities for enterprise security
Three foundational defensive activities every organisation should run continuously: monitoring, detection-engineering and incident response — paired with threat intelligence.
Under Ransomware attack — the story of an incident response
Field account of a ransomware incident response engagement: initial scoping, eradication, recovery decisions and lessons learned about preparation gaps.
How to reduce the likelihood of a Ransomware attack
Practical guidance to reduce ransomware risk: addressing the ‘we’re not a target’ fallacy, exposed services, weak credentials, missing backup discipline and detection gaps.
