Threat Research

Explore the latest Rapid7 articles and research about Threat Research.

SMTP is the key: BPFDoor and AVERAT hitting the network edge

Rapid7 Intelligence

DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors

Rapid7 Intelligence

Identity-as-a-Service: Uncovering Dark Web Marketplaces Trading Executive SSNs

Alexandra Blia, Maor Weinberger

New Report: AI threats are here. Why Q2 2026 signals the end of traditional patch cycles

Rapid7 Intelligence

Latest articles about Threat Research

The Fraud Ecosystem: A Transition From Known Marketplaces to a Fragmented Environment

Operation ASTERIX: Anatomy of a Crypto Fraud Pipeline

Anna Širokova, Jan Recinsky

From a Single Alert to 1,000 Files: Inside an Exposed WebDAV Malware Delivery Lab

Anna Širokova, Jan Recinsky

Malware à la Mode: Tracking Dropping Elephant Tradecraft Through a China-Themed Loader Chain

Criminal AI-as-a-Service in 2026: How the Underground Market Is Operationalizing Cybercrime

Jeremy Makowski

Rapid7 Quarterly Threat Landscape Report: Zero-clicks, geopolitical tensions, and some wins for law enforcement

Rapid7 Intelligence

When IT Support Calls: Dissecting a ModeloRAT Campaign from Teams to Domain Compromise

Muddying the Tracks: The State-Sponsored Shadow Behind Chaos Ransomware

Alexandra Blia, Ivan Feigl

Kyber Ransomware Double Trouble: Windows and ESXi Attacks Explained

New Whitepaper: Stealthy BPFDoor Variants are a Needle That Looks Like Hay

Rapid7 Intelligence

Initial Access Brokers have Shifted to High-Value Targets and Premium Pricing

Rapid7 Intelligence

BPFdoor in Telecom Networks: Sleeper Cells in the Backbone

Rapid7 Intelligence

New Whitepaper: Exploiting Cellular-based IoT Devices

The Attack Cycle is Accelerating: Announcing the Rapid7 2026 Global Threat Landscape Report

Rapid7 Intelligence

Rapid7 Guidance on Observed Microsoft Teams Phishing Campaigns

Introducing Hacktics and Telemetry, a Podcast from Rapid7 Labs

Douglas McKee, Director, Vulnerability Intelligence

Rapid7 Detection Coverage for Iran-Linked Cyber Activity

Rapid7 Intelligence