Written By:
Flashpoint Intel Team

Flashpoint's Intel Team comprises experts with deep intel and security experience across military, federal, government agencies and Fortune 500s, as well as backgrounds in malware analysis, compliance, economic policy, risk, and counterterrorism, among other specialized areas.

Ransomware
Inside Qilin Ransomware: Custom Rust Loader and Kernel-Level EDR Killer
In this post we analyze Qilin ransomware’s new custom Rust loader, break down the inner workings of its ...
Read post
Cyber Threat Intelligence
Understanding Illicit Ecosystems: How Dark Web Forums Structure Cybercrime
In this post, we analyze how dark web forums operate, breaking down Flashpoints tiered classification system and ...
Read post
Infostealer
Remus Stealer: A New, Not-So-New Infostealer
In this post, we explore the emergence of Remus Stealer, analyzing its structural and behavioral similarities to ...
Read post
Corporate and Physical Security
America250 Fourth of July Threat Assessment
In this post we break down the intersecting cyber risks, physical security strains, and operational challenges ...
Read post
Cyber Threat Intelligence
AI Threat Report: How Artificial Intelligence Is Used Across Illicit Communities
A monthly analysis of how artificial intelligence is used in illicit communities, based on Flashpoint proprietary ...
Read post
Cyber Threat Intelligence
Understanding Illicit Ecosystems: Weaponizing Mainstream Apps and Social Infrastructure
As part of our ongoing series, we focus on the shared infrastructure that fuels threat actors; the intersection ...
Read post
Illicit Communities
Understanding Illicit Ecosystems: XSS and the Current State of the Russian-Speaking Underground
In this post, we explore XSS’ shift from a unified forum to a scattered community spread across several ...
Read post
Cyber Threat Intelligence
Escalation in the Middle East: Tracking “Operation Epic Fury” Across Military and Cyber Domains
On February 28, the United States and Israel launched coordinated strikes across Iran under Operation Epic Fury ...
Read post
Fraud
The Phishing-as-a-Service Pipeline: How a Scalable Fraud Ecosystem Is Driving Global Attacks
Flashpoint analysts, working with partner financial institutions, have observed a growing number of PhaaS ...
Read post
Fraud
Tax Refund Fraud in 2026: How Threat Actors Exploit Identity, Verification, and Cash-Out Channels
How threat actors are executing tax refund fraud schemes, from sourcing identity data to bypassing verification ...
Read post
Corporate and Physical Security
Iran-Aligned Militias Signal Expanded Regional Risk Amid US–Israel–Iran Conflict
Across multiple theaters, Iran-aligned groups are using similar language, emphasizing shared objectives, and in ...
Read post
Infostealer
Understanding the DarkCloud Infostealer
Infostealers continue to dominate the initial access landscape in 2026, lowering the barrier to breach through ...
Read post