Threat Intelligence

Frontline Mandiant investigations, expert analysis, tools and guidance, and in-depth security research.

Threat Intelligence

No Place Like Home Network: Disrupting the World's Largest Residential Proxy Network

We disrupted the IPIDEA proxy network, a component of the digital ecosystem leveraged by a wide array of bad actors.

By Google Threat Intelligence Group • 20-minute read

https://storage.googleapis.com/gweb-cloudblog-publish/images/03_ThreatIntelligenceWebsiteBannerIdeas_BA.max-1800x1800.png

Google Threat Intelligence News and Alerts

Subscribe now to receive timely news and alerts from Google Threat Intelligence, including the latest threat-focused blog posts, reports, webinars, podcasts and more.

Subscribe now

Threat Intelligence RSS Feed

Want to keep up-to-date on the latest Threat Intelligence posts? Add the Threat Intelligence RSS feed URL to your RSS reader today.

Threat Intelligence RSS feed URL

Threat Intelligence

Vishing for Access: Tracking the Expansion of ShinyHunters-Branded SaaS Data Theft

By Mandiant • 15-minute read

Threat Intelligence

Guidance from the Frontlines: Proactive Defense Against ShinyHunters-Branded Data Theft Targeting SaaS

By Mandiant • 31-minute read

Threat Intelligence

Diverse Threat Actors Exploiting Critical WinRAR Vulnerability CVE-2025-8088

By Google Threat Intelligence Group • 11-minute read

Threat Intelligence

Closing the Door on Net-NTLMv1: Releasing Rainbow Tables to Accelerate Protocol Deprecation

By Mandiant • 6-minute read

Threat Intelligence

AuraInspector: Auditing Salesforce Aura for Data Exposure

By Mandiant • 13-minute read

Threat Intelligence

Multiple Threat Actors Exploit React2Shell (CVE-2025-55182)

By Google Threat Intelligence Group • 12-minute read

Threat Intelligence

Sanctioned but Still Spying: Intellexa’s Prolific Zero-Day Exploits Continue

By Google Threat Intelligence Group • 14-minute read

Threat Intelligence

Beyond the Watering Hole: APT24's Pivot to Multi-Vector Attacks

By Google Threat Intelligence Group • 10-minute read

Threat Intelligence

Frontline Intelligence: Analysis of UNC1549 TTPs, Custom Tools, and Malware Targeting the Aerospace and Defense Ecosystem

By Mandiant • 35-minute read

Threat Intelligence

Time Travel Triage: An Introduction to Time Travel Debugging using a .NET Process Hollowing Case Study

By Mandiant • 21-minute read