Skip to content
Bulwark BlackBulwark Black LLC
Threat Intel
  • Latest reporting
  • Russian CTI
  • Chinese CTI
  • North Korean CTI
  • Iranian CTI
  • Global / Anomalous
  • Malware
Intel Workbench
  • Workbench home
  • IOC Passport
  • Campaign Constellation · Beta
  • Indicator Database
  • Verified Threat Feeds
  • IOC Extractor
  • Threat Alerts
Software
  • Contractor Codex↗
  • SAMscout AI↗
  • VA Disability Calc & Track
  • BB SOC
  • What we build
  • All software
Services
  • Websites & Web Apps
  • Custom iOS Apps
  • AI & Automation
  • IT Support & Cybersecurity
Company
  • About
  • Community
  • Contact
The BriefBlog
Threat Intel →Work with us →
All Threat Intel →Latest reportingRussian CTIChinese CTINorth Korean CTIIranian CTIGlobal / AnomalousMalware
All Intel Workbench →Workbench homeIOC PassportCampaign Constellation · BetaIndicator DatabaseVerified Threat FeedsIOC ExtractorThreat Alerts
All Software →Contractor Codex↗SAMscout AI↗VA Disability Calc & TrackBB SOCWhat we buildAll software
All Services →Websites & Web AppsCustom iOS AppsAI & AutomationIT Support & Cybersecurity
All Company →AboutCommunityContact
The BriefBlogWork with us →
RSS
Latest
Chainalysis Breach: Recover the Tokens, Verify the Screening BacklogD-Link DDP Flaws: Disable Discovery, Keep the Firmware Review OpenStolen App Secrets: Recover the Cloud Access Behind the CredentialCold-Chain Cyberattacks: Protect the Temperature, Not Just the DashboardOpenSSH on musl: Patch the Server, Verify Key-Only Accounts Stay Key-OnlyCWPdoor: Check the Management Server, Not Just Its Access LogsGhostMap Android Crash Loop: Prepare for Phone Loss Before the App RunsExploited CVEs: Prioritize the Reachable Path to Privileged Access3AM Ransomware: Keep Backup Authority Outside the Domain Blast RadiusNIKKE Launcher Compromise: Recover the Workstation, Not Just the GameAPT29-Linked Mobile Watering Holes: Patch the Phone, Recover the SessionsVAPOR PANDA’s ARTEX Campaign: Close the Trust Gaps Behind Parallel IntrusionsVOLTA Infostealer: Recover the Access Behind the AI-Ranked DossierHelp-Desk Vishing: Verify the Caller Before Opening Remote AccessChainalysis Breach: Recover the Tokens, Verify the Screening BacklogD-Link DDP Flaws: Disable Discovery, Keep the Firmware Review OpenStolen App Secrets: Recover the Cloud Access Behind the CredentialCold-Chain Cyberattacks: Protect the Temperature, Not Just the DashboardOpenSSH on musl: Patch the Server, Verify Key-Only Accounts Stay Key-OnlyCWPdoor: Check the Management Server, Not Just Its Access LogsGhostMap Android Crash Loop: Prepare for Phone Loss Before the App RunsExploited CVEs: Prioritize the Reachable Path to Privileged Access3AM Ransomware: Keep Backup Authority Outside the Domain Blast RadiusNIKKE Launcher Compromise: Recover the Workstation, Not Just the GameAPT29-Linked Mobile Watering Holes: Patch the Phone, Recover the SessionsVAPOR PANDA’s ARTEX Campaign: Close the Trust Gaps Behind Parallel IntrusionsVOLTA Infostealer: Recover the Access Behind the AI-Ranked DossierHelp-Desk Vishing: Verify the Caller Before Opening Remote Access

Threat Intel·Malware·Jan 8, 2024·ByBulwark Gold

Alert: Carbanak Malware Strikes Again With Updated Tactics

Editorial artwork accompanying this article
Alert: Carbanak Malware Strikes Again With Updated Tactics

#Carbanak#Spear Phishing

← Older report

From Akamai to F5 to NTLM… with love.

Newer report →

NoName on Rampage! Claims DDoS Attacks on Ukrainian Government Sites

Next step

Want this turned into detection for your environment?

We build the defenses we write about: detection rules, hardening, and incident response for small businesses and government contractors. Explore our threat intelligence reports and available feeds, or ask how these findings apply to your environment.

Work With Us →Get the IOC Feeds →

Newsletter

The House-Of-L Brief.

Two short reads a day on markets, cyber threats, AI, and geopolitics. A "why it matters" line on every story.

readers get The Brief

Double opt-in. One-click unsubscribe on every issue. We never share your address.

Bulwark Black

Veteran-Owned · SDVOSB

Bulwark Black LLC
Cyber threat intelligence, custom software, and remote tech help.
Remote across the United States. On-site around the Olympic Peninsula, Jefferson County, and Kitsap County, Washington.

(360) 302-4667

Contact details and support hours →

Registered agent address (mailing only):
522 W Riverside Ave, Ste N
Spokane, WA 99201

Intel & Tools

  • Intel Workbench
  • Cyber Threat Intelligence
  • Indicator Database
  • Verified Threat Feeds
  • Campaign Constellation Beta
  • IOC Extractor
  • Tools I Use
  • Threat Alerts
  • The Brief

Services

  • Websites & Web Apps
  • Custom iOS Apps
  • AI & Automation
  • IT Support + Cybersecurity

Company

  • About
  • Software
  • BB SOC
  • VA Disability Calc & Track
  • Community
  • Blog
  • How I Work
  • Contact
  • Privacy
  • Terms
  • VA Calc Privacy Policy

For agencies & primes

  • Capability statement
  • CAGE: 17UL6
  • UEI: DVNTWBJ2HMP8
  • SDVOSB · SAM Registered

support@bulwarkblack.com

Connect

  • LinkedIn
  • GitHub

© 2026 Bulwark Black LLC. All rights reserved.

Privacy·Terms·Cookie choices

We use Google Analytics to measure site traffic, which sets cookies. No ads and no cross-site tracking. See our privacy policy.