Threat intelligence analysts and builders. Talk to someone who does this work, and get a straight answer.
Contact usGet a DemoStart a free trial
Read what our analysts are writing.
Quick Wins and Hunting with the Morado Analytic Engine
A quick start guide on how to hunt through our data using the Morado Analytics Engine
Read the post →Introducing the Morado Analytics Engine
Introducing one of our most powerful capabilities yet, the Morado Analytics Engine
Read the post →Your Brand Is an Attack Surface Now
Attackers increasingly abuse trusted brands outside the network to target customers, partners, and employees.
Read the post →The Credential Economy: How Stolen Access Gets Bought and Sold
Many breaches begin with stolen access sold on underground markets. Learn how the credential economy works and how to spot the early warning
Read the post →Priority Intelligence Requirements: The Operating System of a CTI Program
Priority Intelligence Requirements (PIRs) help CTI teams focus collection, analysis, and reporting on the questions that matter most.
Read the post →Python Implant Analysis - Deploying Commodity RATs and Ransomware Reconnaissance
Python implant uses Telegram C2, commodity RATs, and ransomware recon—full technical analysis with IOCs and YARA.
Read the post →Infection Chain Leading to Custom Python Implant
Legal-themed JavaScript lure triggers obfuscated PowerShell and DLL sideloading to deploy RATs, enabling persistent remote access.
Read the post →Continuous Threat Exposure Management: Closing the Gap Between Discovery and Risk
CTEM helps teams continuously identify, validate, and prioritize real-world exposures so they can reduce risk faster.
Read the post →From Exposure to Intelligence: Connecting Attack Surface Monitoring to Security Operations
Turning attack surface visibility into actionable security intelligence.
Read the post →Seeing Your Organization Through an Attacker’s Eyes: Why Attack Surface Monitoring Matters
Understand how attackers map your external infrastructure and why continuous attack surface monitoring is essential.
Read the post →Expanding Threatnote’s Intelligence Fabric: AI & Fraud Taxonomies Now Fully Integrated
Threatnote unifies AI, fraud, and cyber threat taxonomies into one STIX-native model for better correlation and visibility.
Read the post →Intelligence That Works Together: The Next Step in Cyber Threat Intelligence
Threat intelligence works best when it is connected. Unified workflows reduce noise, improve visibility, and support faster decisions.
Read the post →Reducing Tool Sprawl in Threat Intelligence: Why Consolidation Is Becoming Essential for Modern CTI Programs
How tool sprawl impacts threat intelligence teams, increasing costs and slowing response, and why organizations are consolidating tools.
Read the post →Amadey Loader Analysis
A look Into Amadey Loader and its core functionality and infrastructure
Read the post →Malicious Tools Leveraging AI
Threat actors are weaponizing AI tools like SpamGPT and WormGPT to automate phishing, ransomware, and exploitation attacks.
Read the post →The Growing Threat of AI Attacks
A detailed analysis of how emerging AI threats are being weaponized by threat actors to compromise corporate environments.
Read the post →Preventable Paths: How INC Ransomware Continues to Thrive
INC Ransomware thrives on weak security—exploiting unpatched systems, poor credentials, and misconfigurations
Read the post →Announcing the CTI-CMM Assessment Tool in Threatnote
Measure and improve CTI maturity with Threatnote’s new assessment tool, built on principles inspired by the CTI-CMM framework.
Read the post →AI's Role in Modern Phishing
Blog about AI's role in modern day phishing
Read the post →Phishing Campaigns Exploiting Legitimate Infrastructure
Phishing is evolving: attackers exploit link-wrapping and trusted infrastructure to bypass filters, adding malicious campaigns into workflow
Read the post →GLOBAL Ransomware - New Tactics Revealed
GLOBAL is a RaaS group (mid-2025) tied to Mamona/BlackLock, targeting healthcare & manufacturing with AI tools and aggressive tactics.
Read the post →How Threatnote Leverages STIX 2.1 for Comprehensive Threat Intelligence Analysis
See how Threatnote leverages STIX 2.1 across all domains in CTI
Read the post →RaccoonO365: An Active Campaign and New Features
Morado discovered this campaign in September 2024 we are publishing an update to this campaign
Read the post →How MSSPs and MSPs Can Deliver Modern Threat Intelligence with Threatnote as a Unified Threat Management Platform
Threatnote - A Purpose-Built Platform for MSSPs and MSPs
Read the post →Threat Actor Spotlight: Pryx
In this post, we provide an assessment of the threat actor known as Pryx
Read the post →RaccoonO365 Script Analysis
In this post, we provide our technical analysis of the O365 Raccoon Stealer Malware
Read the post →Understanding RaccoonO365 Phishing-as-a-Service
In this post, we dive into understanding the RaccoonO365 PaaS Operation
Read the post →What is the Threat Intelligence Lifecycle and How Threatnote Streamlines your CTI Processes
Understanding the Threat Intel Lifecycle, and how to leverage it effectively, is one of the most crucial parts for a threat intel team
Read the post →The Rise and Fall of BlackForums: A Glimpse into the Ephemeral World of Cybercrime Communities
BlackForums rise and fall highlights the transient nature of dark web forums, marked by rivalry, law enforcement pressure, and conflict
Read the post →Case Study: How Large Companies Successfully Countered Cyber Attacks
Examples of best practices and lessons learned from previous cyber attacks on large companies.
Read the post →Cloud Security: Challenges and Solutions for Protecting Data
Discussing specific vulnerabilities of the cloud and how to address them effectively.
Read the post →Current Trends in Cyber Attacks: What We Need to Know in 2024
The latest tactics used by cyber attackers and how to protect your business
Read the post →Cyber Threat Intelligence: Turning Data into Actionable Insights
The benefits of threat intelligence and how to implement an effective program in your organization.
Read the post →Cybersecurity in the IoT Era: Challenges and Solutions
This article discusses the vulnerabilities of IoT devices and how to implement effective security measures to protect against cyber threats.
Read the post →How to Develop an Effective Cyber Incident Response Plan
Essential steps for creating a robust incident response plan and how to test it effectively.
Read the post →The Future of Authentication: From Passwords to Biometric Authentication
Explore the evolution of authentication methods and the advantages of biometric authentication.
Read the post →The Impact of Cybersecurity Regulations on Businesses
An analysis of recent cybersecurity legislation and its effects on companies.
Read the post →The Risks of Phishing Attacks and How to Recognize Them
Strategies for educating and raising awareness among employees to prevent phishing attacks.
Read the post →The Role of Cybersecurity in Protecting Clients' Confidential Data
The importance of protecting customer data and how to implement effective security measures.
Read the post →Utilizing Artificial Intelligence in Detecting and Preventing Cyber Attacks
Explore how AI enhances cybersecurity by improving threat detection and prevention.
Read the post →AI Used for Malware
Cybersecurity researchers have discovered that cybercriminals are using ChatGPT to develop malware and phishing emails.
Read the post →FBI Seizes Hive Ransomware Infrastructure
The FBI seized the infrastructure of the Hive ransomware group in a joint operation with global agencies.
Read the post →Hackers Sharing Cracked Brute Ratel
Brute Ratel is notable for its ability to evade Endpoint Detection & Response (EDR) and Antivirus (AV) software.
Read the post →Initial Access Issues
Explore the challenges of initial access in cybersecurity and how attackers use credential leaks and infostealers to infiltrate networks.
Read the post →Interesting New Attack Tactic is Discovered by University Researchers
Researchers from Georgia Tech, the University of Michigan, and Ruhr University Bochum discovered a new cyberattack method called Hot Pixels
Read the post →Introduction to Infostealers
Cybersecurity researchers have discovered that cybercriminals are using ChatGPT to develop malware and phishing emails.
Read the post →It is time to be proactive
Proactive Cybersecurity: Strengthening Defense Strategies through Shared Threat Intelligence
Read the post →Maximizing Your Security and Efficiency with Cyber Threat Intelligence
The importance of Cyber Threat Intelligence (CTI) in enhancing organizational security and efficiency.
Read the post →The holidays are a good time for cyber attacks
Holidays are prime times for cyber attacks as many cybersecurity teams are short-staffed.
Read the post →What's the difference? Threat Data, Threat Information & Threat Intelligence
The differences between threat data, threat information, and threat intelligence.
Read the post →See Morado in action.
Book a demo and see Morado built around your organization: your exposure, your threats and the workflows to act on them.
Questions first? Contact us.