Check Point Research

@_CPResearch_

Fighting cyber threats one research at a time. News from Check Point’s (@checkpointSW) Research team.

The Internet

research.checkpoint.com

Replies Reposts Media

Check Point Research
@_CPResearch_
Sep 2
From local banking trojans to foreign 🇨🇳 operators targeting Brazil 🇧🇷. CPR uncovered #GamblingGoblin, a Chinese-speaking actor abusing Brazilian government sites for large-scale #SEO fraud. Read more 👇:
Gaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO...
From research.checkpoint.com
Check Point Research
@_CPResearch_
Aug 31
#JSCeal didn't give up its secrets willingly. Following our #BlackHat2026 talk, we're releasing Breaking the Seal: our research on statically deobfuscating compiled, obfuscated #V8 #malware. Inside: the methodology, the open-source toolkit, and the malware capabilities recovered
Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode - Check Point Research
From research.checkpoint.com
Check Point Research
@_CPResearch_
Aug 20
⚒️ BTR Reforged: Weaponizing Defender's Remediation Driver as a Kernel Operation Primitive ⚠ Trusted Remediation Primitives with Undocumented Internals. 🔓 15+ years. Unchanged. Unblockable. 🤔 What if an attacker learned its language? We did. 👇
BTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation Primitive - Check...
From research.checkpoint.com
3
Check Point Research
@_CPResearch_
Aug 18
#StopAndProtect blends ransomware, data theft and hands-on keyboard control. 🥷OPSEC failures reveals logs from over 6,000 victim IPs 📰Thousands of hacked WordPress websites used to lure victims and host operation infrastructure 📱 Custom stealer uses WhatsApp web and desktop
Thousands of Hacked WordPress Sites, One Operation: Unmasking StopAndProtect - Check Point Research
From research.checkpoint.com
1
Check Point Research
@_CPResearch_
Aug 11
0-Day Used by Lazarus in #DreamJob Campaign Against Defense Sector: 💥LPE vulnerability in Microsoft’s Afd.sys driver (CVE-2026-68820) 🧰New tools, including #Troy backdoor 🌍Compromised Roundcube servers (CVE-2025-49113) as infrastructure Read More : research.checkpoint.com/2026/shatterin…
2