FrostFalak, a Yemen-based threat actor targeting Israeli OT networks, uses Israeli VPN exit nodes and compromised network appliances to conceal its activity while targeting construction, transportation and building management organizations.
Check Point Research
@_CPResearch_
Fighting cyber threats one research at a time. News from Check Point’s (@checkpointSW) Research team.
- I'm super excited to be speaking at Black Hat USA 2026, delivering my research "BTR Reforged: Weaponizing Defender's Remediation Driver as a Kernel Operation Primitive" 🤗💪 Big thanks @_CPResearch_ & @BlackHatEvents! 💯 Join me: app.ingo.me/q/ktqyt #BHUSA #cybersecurity
- 🇮🇷 Cavern Manticore: Exposing Iran-Linked Modular C2 Framework CP<r> reveals: 🎯 Israeli Gov & IT sector targeted 🧩 Novel modular "Cavern" C2 framework, 3 .NET formats 🕵️ Iran-nexus; MOIS ties to MuddyWater & Lyceum 👻 Most samples: zero VT hits
- Can a website turn into ransomware on Android? We found an AI-generated malware sample that suggests the answer is closer to "yes" than many would expect. No exploit. No APK. No native malware. 👇
- Fake trust is attacker infrastructure: GitHub starts, YouTube views, news websites and even "safe" VirusTotal comments to sell legitimacy. research.checkpoint.com/2026/from-star……
Get the full app experience
Unlock more features and see what people are talking about right now.