Threat-Analysis-Group
Google
Thu Sep 12 2024
TAG Bulletin: Q3 2024
This bulletin includes coordinated influence operation campaigns terminated on our platforms in Q3 2024.
Safety-and-Security
Thu Aug 29 2024
State-backed attackers and commercial surveillance vendors repeatedly use the same exploits
We’re sharing an update on suspected state-backed attacker APT29 and the use of exploits identical to those used by Intellexa and NSO.
Wed Aug 14 2024
Iranian backed group steps up phishing campaigns against Israel, U.S.
Google’s Threat Analysis Group shares insights on APT42, an Iranian government-backed threat actor.
Tue Jun 04 2024
TAG Bulletin: Q2 2024
Our bulletin covering coordinated influence operation campaigns terminated on our platforms in Q2 2024.
Wed Mar 06 2024
TAG Bulletin: Q1 2024
This bulletin includes coordinated influence operation campaigns terminated on our platforms in Q1 2024.
Tue Feb 06 2024
Buying Spying: How the commercial surveillance industry works and what can be done about it
Thu Jan 18 2024
Russian threat group COLDRIVER expands its targeting of Western officials to include the use of malware
Threat Analysis Group sheds light on Russian threat COLDRIVER’s use of malware.
Fri Dec 15 2023
TAG Bulletin: Q4 2023
This bulletin includes coordinated influence operation campaigns terminated on our platforms in Q4 2023.
Thu Nov 16 2023
Zimbra 0-day used to target international government organizations
TAG’s discovery of a 0-day exploit used to steal email data from international government organizations.
Fri Sep 22 2023
0-days exploited by commercial surveillance vendor in Egypt
Last week Google’s Threat Analysis Group (TAG), in partnership with The Citizen Lab, discovered an in-the-wild 0-day exploit chain for iPhon...
Fri Sep 08 2023
TAG Bulletin: Q3 2023
This bulletin includes coordinated influence operation campaigns terminated on our platforms in Q3 2023.
Thu Sep 07 2023
Active North Korean campaign targeting security researchers
Threat Analysis Group shares findings on a new campaign by North Korean actors targeting security researchers.
Thu Jul 27 2023
The ups and downs of 0-days
The goal of this report is to analyze the exploits from the year as a whole, looking for trends, gaps, lessons learned, and successes.
Tue May 30 2023
TAG Bulletin: Q2 2023
Threat Analysis Group shares their Q2 2023 bulletin.
Thu Jan 26 2023
Over 50,000 instances of DRAGONBRIDGE activity disrupted in 2022
An update on TAG's work to disrupt the information operation network DRAGONBRIDGE.
Wed Jan 25 2023
TAG Bulletin: Q4 2022
Threat Analysis Group shares their Q4 bulletin.