{"id":5772,"date":"2026-05-07T09:06:10","date_gmt":"2026-05-07T08:06:10","guid":{"rendered":"https:\/\/www.withsecure.com\/?page_id=5772"},"modified":"2026-05-19T16:37:45","modified_gmt":"2026-05-19T15:37:45","slug":"w-labs","status":"publish","type":"page","link":"https:\/\/www.withsecure.com\/en\/resources-hub\/w-labs\/","title":{"rendered":"W\/Labs"},"content":{"rendered":"<section\n    class=\"wp-block-one-column-block edwp-block js-wp-block-one-column-block wp-block-one-column-block--content-1 layout--spacing-xxxxl-top layout--spacing-xl-bottom\"\n    >\n    <div class=\"wp-block-one-column-block__container\">\n                                                                                                                            <div class=\"wp-component-content wp-component-content--default wp-block-one-column-block__content fade-in\">\n            <h1 class=\"wp-component-heading text--h2 wp-component-content__title\">\n    WithSecure <span class=\"blue-text\">Labs.<\/span><\/h1>                    <div class=\"wp-component-content__inner\">\n                                    <div class=\"wp-component-content__content wysiwyg\">\n                        <div class=\"wp-component-paragraph \">\n    <p class=\"text--p-medium\">Most up-to-date information regarding WithSecure<\/p>\n<\/div>\n                    <\/div>\n                                                            <\/div>\n                <\/div>                                                                                <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-archive edwp-block layout--none-top layout--spacing-xxxl-bottom\"\n    >\n    <div class=\"wp-block-archive__container\">\n        <div class=\"posts-wrapper js-posts-wrapper\">\n    <form class=\"filters js-filters-form\" role=\"search\"><input type=\"hidden\" name=\"currentPage\" value=\"1\"><button type=\"button\" aria-label=\"Filters\" class=\"filters__mobile-panel-opener js-open-panel\">\n    Filters<\/button>\n<div class=\"filters__mobile-panel js-mobile-panel\">\n    <div class=\"filters__mobile-panel-header\">\n                    <span>Filters<\/span>\n                <button\n            type=\"button\"\n            aria-label=\"Close Filters\"\n            class=\"filters__mobile-panel-close js-close-panel\"\n        >\n            Close Filters        <\/button>\n    <\/div>\n    <div class=\"filters__mobile-panel-inner\">\n        <div class=\"filters__field filters__field--select filters__field--fancy-select\">    <label\n        for=\"mobile-content_type\"\n        class=\"filters__field__label\"\n                    >\n        Content type    <\/label>\n<select\n    name=\"mobile-content_type\"\n    id=\"mobile-content_type\"\n    class=\"filters__field__select js-select-mobile-filter\"\n>\n            <option value selected>\n            All        <\/option>\n                <option\n            value=\"298\"\n                    >\n            Article        <\/option>\n            <option\n            value=\"296\"\n                    >\n            Blog post        <\/option>\n            <option\n            value=\"223\"\n                    >\n            Presentation        <\/option>\n            <option\n            value=\"221\"\n                    >\n            Publications        <\/option>\n            <option\n            value=\"225\"\n                    >\n            Reports        <\/option>\n            <option\n            value=\"224\"\n                    >\n            Research        <\/option>\n            <option\n            value=\"222\"\n                    >\n            Threat report        <\/option>\n            <option\n            value=\"300\"\n                    >\n            Whitepaper        <\/option>\n    <\/select>\n<\/div><div class=\"filters__field filters__field--select filters__field--fancy-select\">    <label\n        for=\"mobile-category\"\n        class=\"filters__field__label\"\n                    >\n        Category    <\/label>\n<select\n    name=\"mobile-category\"\n    id=\"mobile-category\"\n    class=\"filters__field__select js-select-mobile-filter\"\n>\n            <option value selected>\n            All        <\/option>\n                <option\n            value=\"273\"\n                    >\n            AI Security        <\/option>\n            <option\n            value=\"238\"\n                    >\n            Application Security        <\/option>\n            <option\n            value=\"240\"\n                    >\n            Attack Detection        <\/option>\n            <option\n            value=\"227\"\n                    >\n            Cloud Security        <\/option>\n            <option\n            value=\"229\"\n                    >\n            Data Protection        <\/option>\n            <option\n            value=\"272\"\n                    >\n            Dfir        <\/option>\n            <option\n            value=\"236\"\n                    >\n            Email Security        <\/option>\n            <option\n            value=\"239\"\n                    >\n            Endpoint Security        <\/option>\n            <option\n            value=\"270\"\n                    >\n            Identity Security        <\/option>\n            <option\n            value=\"140\"\n                    >\n            Malware        <\/option>\n            <option\n            value=\"235\"\n                    >\n            Managed Security        <\/option>\n            <option\n            value=\"237\"\n                    >\n            Network Security        <\/option>\n            <option\n            value=\"271\"\n                    >\n            Offensive security        <\/option>\n            <option\n            value=\"148\"\n                    >\n            Ransomware        <\/option>\n            <option\n            value=\"234\"\n                    >\n            Server Security        <\/option>\n            <option\n            value=\"231\"\n                    >\n            Software Protection        <\/option>\n            <option\n            value=\"269\"\n                    >\n            Threat Intelligence        <\/option>\n    <\/select>\n<\/div><div class=\"filters__field filters__field--input\"><label class=\"filters__field__label\" for=\"mobile-search\">\n    Search<\/label>\n<input\n    type=\"text\"\n    name=\"mobile-search\"\n    id=\"mobile-search\"\n    class=\"filters__field__input js-input-mobile-filter\"\n    value=\"\"\n    placeholder=\"Search\"\n\/>\n<\/div><div class=\"filters__field filters__field--select filters__field--small-select\">    <label\n        for=\"mobile-sort\"\n        class=\"filters__field__label\"\n                        aria-label=\"Sort by\"\n            >\n        Sort by    <\/label>\n<select\n    name=\"mobile-sort\"\n    id=\"mobile-sort\"\n    class=\"filters__field__select js-select-mobile-filter\"\n>\n            <option value selected>\n            Sort by        <\/option>\n                <option\n            value=\"desc\"\n                    >\n            Newest to oldest        <\/option>\n            <option\n            value=\"asc\"\n                    >\n            Oldest to newest        <\/option>\n    <\/select>\n<\/div>    <\/div>\n<\/div>\n<div class=\"filters__field filters__field--select filters__field--fancy-select filters__field--hide-mobile\">    <label\n        for=\"content_type\"\n        class=\"filters__field__label\"\n                    >\n        Content type    <\/label>\n<select\n    name=\"content_type\"\n    id=\"content_type\"\n    class=\"filters__field__select js-select-filter\"\n>\n            <option value selected>\n            All        <\/option>\n                <option\n            value=\"298\"\n                    >\n            Article        <\/option>\n            <option\n            value=\"296\"\n                    >\n            Blog post        <\/option>\n            <option\n            value=\"223\"\n                    >\n            Presentation        <\/option>\n            <option\n            value=\"221\"\n                    >\n            Publications        <\/option>\n            <option\n            value=\"225\"\n                    >\n            Reports        <\/option>\n            <option\n            value=\"224\"\n                    >\n            Research        <\/option>\n            <option\n            value=\"222\"\n                    >\n            Threat report        <\/option>\n            <option\n            value=\"300\"\n                    >\n            Whitepaper        <\/option>\n    <\/select>\n<\/div><div class=\"filters__field filters__field--select filters__field--fancy-select filters__field--hide-mobile\">    <label\n        for=\"category\"\n        class=\"filters__field__label\"\n                    >\n        Category    <\/label>\n<select\n    name=\"category\"\n    id=\"category\"\n    class=\"filters__field__select js-select-filter\"\n>\n            <option value selected>\n            All        <\/option>\n                <option\n            value=\"273\"\n                    >\n            AI Security        <\/option>\n            <option\n            value=\"238\"\n                    >\n            Application Security        <\/option>\n            <option\n            value=\"240\"\n                    >\n            Attack Detection        <\/option>\n            <option\n            value=\"227\"\n                    >\n            Cloud Security        <\/option>\n            <option\n            value=\"229\"\n                    >\n            Data Protection        <\/option>\n            <option\n            value=\"272\"\n                    >\n            Dfir        <\/option>\n            <option\n            value=\"236\"\n                    >\n            Email Security        <\/option>\n            <option\n            value=\"239\"\n                    >\n            Endpoint Security        <\/option>\n            <option\n            value=\"270\"\n                    >\n            Identity Security        <\/option>\n            <option\n            value=\"140\"\n                    >\n            Malware        <\/option>\n            <option\n            value=\"235\"\n                    >\n            Managed Security        <\/option>\n            <option\n            value=\"237\"\n                    >\n            Network Security        <\/option>\n            <option\n            value=\"271\"\n                    >\n            Offensive security        <\/option>\n            <option\n            value=\"148\"\n                    >\n            Ransomware        <\/option>\n            <option\n            value=\"234\"\n                    >\n            Server Security        <\/option>\n            <option\n            value=\"231\"\n                    >\n            Software Protection        <\/option>\n            <option\n            value=\"269\"\n                    >\n            Threat Intelligence        <\/option>\n    <\/select>\n<\/div><div class=\"filters__field filters__field--input filters__field--hide-mobile\"><label class=\"filters__field__label\" for=\"search\">\n    Search<\/label>\n<input\n    type=\"text\"\n    name=\"search\"\n    id=\"search\"\n    class=\"filters__field__input js-input-filter\"\n    value=\"\"\n    placeholder=\"Search\"\n\/>\n<\/div><div class=\"filters__field filters__field--select filters__field--small-select filters__field--hide-mobile\">    <label\n        for=\"sort\"\n        class=\"filters__field__label\"\n                        aria-label=\"Sort by\"\n            >\n        Sort by    <\/label>\n<select\n    name=\"sort\"\n    id=\"sort\"\n    class=\"filters__field__select js-select-filter\"\n>\n            <option value selected>\n            Sort by        <\/option>\n                <option\n            value=\"desc\"\n                    >\n            Newest to oldest        <\/option>\n            <option\n            value=\"asc\"\n                    >\n            Oldest to newest        <\/option>\n    <\/select>\n<\/div><\/form>    <div class=\"posts-wrapper__cards-wrapper\">\n                <div\n            class=\"posts-wrapper__cards js-posts-wrapper-cards row-load\"\n            id=\"posts-wrapper\"\n            data-postTypes=\"lab_item\"\n                                                data-initial-load=\"1\"\n                                >\n            <div class=\"wp-component-card-insight js-card-link wp-component-card-insight--highlighted\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img width=\"2048\" height=\"1366\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3506.jpg.webp\" class=\"wp-component-card-insight__image\" alt=\"Overhead view down a wooden staircase of two people working on laptops in a casual seating nook below.\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3506.jpg.webp 2048w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3506-300x200.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3506-1024x683.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3506-768x512.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3506-1536x1025.jpg.webp 1536w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3506-447x298.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3506-219x146.jpg.webp 219w\" sizes=\"auto, (max-width: 2048px) 100vw, 2048px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Article<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">Endpoint Security<\/span>\n                                            <span class=\"wp-component-card-insight__category\">Malware<\/span>\n                                            <span class=\"wp-component-card-insight__category\">Ransomware<\/span>\n                                            <span class=\"wp-component-card-insight__category\">Threat Intelligence<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">Stolen creds and stinging loaders: An initial access campaign via SEO poisoning<\/h3>\n                                                    <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary btn--dark wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/w-labs\/initial-access-via-seo-poisoning\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div><div class=\"wp-component-card-insight js-card-link\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img width=\"618\" height=\"440\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/placeholder.jpg.webp\" class=\"wp-component-card-insight__image\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/placeholder.jpg.webp 618w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/placeholder-300x214.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/placeholder-447x318.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/placeholder-205x146.jpg.webp 205w\" sizes=\"auto, (max-width: 618px) 100vw, 618px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Blog post<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">AI Security<\/span>\n                                            <span class=\"wp-component-card-insight__category\">Software Protection<\/span>\n                                            <span class=\"wp-component-card-insight__category\">Threat Intelligence<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">GREYVIBE: A Russia-nexus group leveraging AI across state-aligned operations<\/h3>\n                                                    <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/w-labs\/greyvibe\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div><div class=\"wp-component-card-insight js-card-link\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img width=\"618\" height=\"440\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/placeholder.jpg.webp\" class=\"wp-component-card-insight__image\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/placeholder.jpg.webp 618w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/placeholder-300x214.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/placeholder-447x318.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/placeholder-205x146.jpg.webp 205w\" sizes=\"auto, (max-width: 618px) 100vw, 618px\" \/>                    <p class=\"wp-component-card-insight__content-type\">W\/Labs<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                            <h3 class=\"wp-component-card-insight__title\">WithSecure uncovers Russia-nexus threat group using AI to target Ukraine and European organisations<\/h3>\n                                                    <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/w-labs\/10919\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div><div class=\"wp-component-card-insight js-card-link\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img width=\"1200\" height=\"800\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research2.jpg.webp\" class=\"wp-component-card-insight__image\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research2.jpg.webp 1200w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research2-300x200.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research2-1024x683.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research2-768x512.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research2-447x298.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research2-219x146.jpg.webp 219w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Article<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">Endpoint Security<\/span>\n                                            <span class=\"wp-component-card-insight__category\">Threat Intelligence<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">The &#8216;vice&#8217; in tech advice: ClickFix-style commands disguised as tech tips across social media platforms and beyond<\/h3>\n                                                    <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/w-labs\/clickfix-social-media\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div><div class=\"wp-component-card-insight js-card-link\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img width=\"1200\" height=\"800\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_insights.jpg.webp\" class=\"wp-component-card-insight__image\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_insights.jpg.webp 1200w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_insights-300x200.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_insights-1024x683.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_insights-768x512.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_insights-447x298.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_insights-219x146.jpg.webp 219w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Article<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">Dfir<\/span>\n                                            <span class=\"wp-component-card-insight__category\">Server Security<\/span>\n                                            <span class=\"wp-component-card-insight__category\">Threat Intelligence<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">Ivanti EPMM Exploitation: Hit-and-Run<\/h3>\n                                            <p class=\"wp-component-card-insight__desc\">This blogpost, written by WithSecure\u2019s STINGR Group, presents the analysis of a security incident that happened in February 2026 and was investigated by the WithSecure Incident Response team.<\/p>\n                            <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/w-labs\/ivanti-epmm-exploitation\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div><div class=\"wp-component-card-insight js-card-link\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img width=\"1200\" height=\"800\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research.jpg.webp\" class=\"wp-component-card-insight__image\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research.jpg.webp 1200w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research-300x200.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research-1024x683.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research-768x512.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research-447x298.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research-219x146.jpg.webp 219w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Article<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">Network Security<\/span>\n                                            <span class=\"wp-component-card-insight__category\">Ransomware<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">The Changing Economics of Cybercrime-as-a-Service: What Defenders Need to Know<\/h3>\n                                            <p class=\"wp-component-card-insight__desc\">Back in 2023, when we last wrote about Cybercrime-as-a-Service, we described cybercrime as an economy that had figured out how to scale<\/p>\n                            <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/w-labs\/changing-economics-of-cybercrime-as-a-service\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div><div class=\"wp-component-card-insight js-card-link\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img width=\"1200\" height=\"800\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research.jpg.webp\" class=\"wp-component-card-insight__image\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research.jpg.webp 1200w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research-300x200.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research-1024x683.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research-768x512.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research-447x298.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research-219x146.jpg.webp 219w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Publications<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">Attack Detection<\/span>\n                                            <span class=\"wp-component-card-insight__category\">Threat Intelligence<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">To the past and beyond: Andariel\u2019s latest arsenal and cyberattacks<\/h3>\n                                            <p class=\"wp-component-card-insight__desc\">WithSecure proactively identified and notified a European customer belonging to the public\/legal sector of a breach attributed with high confidence to the Andariel group, a state-sponsored cyber group linked to the Reconnaissance General Bureau (RGB) 3rd bureau of Democratic People\u2019s Republic of Korea (DPRK).<\/p>\n                            <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/w-labs\/andariel-2025\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div><div class=\"wp-component-card-insight js-card-link\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img width=\"1200\" height=\"800\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_news.jpg.webp\" class=\"wp-component-card-insight__image\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_news.jpg.webp 1200w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_news-300x200.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_news-1024x683.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_news-768x512.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_news-447x298.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_news-219x146.jpg.webp 219w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Article<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">Ransomware<\/span>\n                                            <span class=\"wp-component-card-insight__category\">Software Protection<\/span>\n                                            <span class=\"wp-component-card-insight__category\">Threat Intelligence<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">TangleCrypt: a sophisticated but buggy malware packer<\/h3>\n                                            <p class=\"wp-component-card-insight__desc\">WithSecure&#039;s STINGR Group is releasing a detailed technical analysis of TangleCrypt, a previously undocumented packer for Windows malware.<\/p>\n                            <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/w-labs\/tanglecrypt\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div><div class=\"wp-component-card-insight js-card-link\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img width=\"1200\" height=\"800\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research.jpg.webp\" class=\"wp-component-card-insight__image\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research.jpg.webp 1200w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research-300x200.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research-1024x683.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research-768x512.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research-447x298.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_research-219x146.jpg.webp 219w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Article<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">Attack Detection<\/span>\n                                            <span class=\"wp-component-card-insight__category\">Network Security<\/span>\n                                            <span class=\"wp-component-card-insight__category\">Threat Intelligence<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">WEBJACK: Evolving IIS Hijacking Campaign Abuses SEO for Fraud and Monetization<\/h3>\n                                            <p class=\"wp-component-card-insight__desc\">WithSecure\u2019s STINGR has been investigating a malware campaign, tracked as WEBJACK, which compromises Microsoft IIS servers<\/p>\n                            <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/w-labs\/webjack\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div><div class=\"wp-component-card-insight js-card-link\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img width=\"1200\" height=\"800\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_news.jpg.webp\" class=\"wp-component-card-insight__image\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_news.jpg.webp 1200w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_news-300x200.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_news-1024x683.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_news-768x512.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_news-447x298.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_news-219x146.jpg.webp 219w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Article<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">Identity Security<\/span>\n                                            <span class=\"wp-component-card-insight__category\">Software Protection<\/span>\n                                            <span class=\"wp-component-card-insight__category\">Threat Intelligence<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">TamperedChef: Malvertising to Credential Theft<\/h3>\n                                            <p class=\"wp-component-card-insight__desc\">TamperedChef is a sophisticated malware campaign that leveraged a convincing advertising campaign strategy and a fully functional decoy application to target European organizations.<\/p>\n                            <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/w-labs\/tamperedchef\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div><div class=\"wp-component-card-insight js-card-link\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img width=\"1200\" height=\"800\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_insights.jpg.webp\" class=\"wp-component-card-insight__image\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_insights.jpg.webp 1200w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_insights-300x200.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_insights-1024x683.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_insights-768x512.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_insights-447x298.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_insights-219x146.jpg.webp 219w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Article<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">Email Security<\/span>\n                                            <span class=\"wp-component-card-insight__category\">Ransomware<\/span>\n                                            <span class=\"wp-component-card-insight__category\">Threat Intelligence<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">Email-Delivered RMM: Abusing PDFs for Silent Initial Access<\/h3>\n                                            <p class=\"wp-component-card-insight__desc\">Since November 2024, WithSecure has been tracking a slight uptick of targeted activities leveraging Remote Monitoring and Management (RMM) tools embedded within PDF documents.<\/p>\n                            <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/w-labs\/email-delivered-rmm\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div><div class=\"wp-component-card-insight js-card-link\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img width=\"1200\" height=\"800\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_news.jpg.webp\" class=\"wp-component-card-insight__image\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_news.jpg.webp 1200w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_news-300x200.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_news-1024x683.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_news-768x512.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_news-447x298.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/ws_labs_news-219x146.jpg.webp 219w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Article<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">Application Security<\/span>\n                                            <span class=\"wp-component-card-insight__category\">Attack Detection<\/span>\n                                            <span class=\"wp-component-card-insight__category\">Threat Intelligence<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">Active exploitation of on-premise SharePoint Server vulnerabilities \u201cToolShell\u201d<\/h3>\n                                            <p class=\"wp-component-card-insight__desc\">On July 19th 2025, Microsoft reported on a set of vulnerabilities being actively exploited in-the-wild targeting on-premise SharePoint Servers,<\/p>\n                            <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/w-labs\/toolshell\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div>        <\/div>\n        <div class=\"posts-wrapper__no-results js-posts-wrapper-no-results posts-wrapper__no-results--hide\">\n    <h2 class=\"posts-wrapper__no-results__title\">Not Found<\/h2>\n    <p class=\"posts-wrapper__no-results__description\">No results found, please try something else!<\/p>\n<\/div>\n<div class=\"posts-wrapper__pagination-wrapper\">\n    <div\n        class=\"posts-wrapper__pagination js-pagination\"\n        data-total-pages=\"7\"\n        data-current-page=\"1\"\n    >\n    <\/div>\n<\/div>    <\/div>\n<\/div>\n    <\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":3,"featured_media":0,"parent":5760,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-5772","page","type-page","status-publish","hentry"],"acf":[],"card":"<div class=\"wp-component-card-insight js-card-link wp-component-card-insight--highlighted\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img width=\"618\" height=\"440\" src=\"https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/05\/placeholder.jpg\" class=\"wp-component-card-insight__image\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/05\/placeholder.jpg 618w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/05\/placeholder-300x214.jpg 300w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/05\/placeholder-447x318.jpg 447w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/05\/placeholder-205x146.jpg 205w\" sizes=\"auto, (max-width: 618px) 100vw, 618px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Page<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                            <h3 class=\"wp-component-card-insight__title\">W\/Labs<\/h3>\n                                                    <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary btn--dark wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/w-labs\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div>","_links":{"self":[{"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/pages\/5772","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/comments?post=5772"}],"version-history":[{"count":5,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/pages\/5772\/revisions"}],"predecessor-version":[{"id":13509,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/pages\/5772\/revisions\/13509"}],"up":[{"embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/pages\/5760"}],"wp:attachment":[{"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/media?parent=5772"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}