CYFIRMA Research

The CYFIRMA Research team has published its Australia & New Zealand Cyber Threat Landscape Report, examining cyber threat activity across Mining, Financial Services, Manufacturing, and Banking from January 2025 onward. The research highlights a persistent identity and access-driven threat landscape, with credential-based attacks, ransomware, compromised access, and underground-market activity continuing to shape the regional risk environment. Link to the Research Report: https://w...

Tax-Themed Malware Campaign Abusing Indian Income Tax Department Identity Researchers at CYFIRMA have identified and analysed a malware distribution campaign abusing the Indian Income Tax Department theme to target users in India. The campaign uses multiple fraudulent tax-themed domains, deceptive assessment notices, and a malicious VHDX disk image to deliver a staged malware payload. The campaign demonstrates a multi-stage malware delivery operation combining government impersonation,...

August 2026 Ransomware Threat Intelligence Briefing Ransomware activity rebounded in August 2026, with 1046 publicly disclosed victims worldwide, an 18.2% increase from July, highlighting the continued resilience and expansion of the ransomware-as-a-service (RaaS) ecosystem. In this episode, we break down: • The most active ransomware groups shaping the August threat landscape, including Qilin and Thegentlemen • Industries and countries experiencing the highest levels of targeting • The gro...

India BFSI Cyber Threat Landscape 2026 India’s BFSI ecosystem is entering a more complex cyber-risk environment where data exposure, ransomware, digital-payment fraud, identity compromise, AI-enabled social engineering, cloud/SaaS abuse and third-party risk are increasingly converging. Our latest analysis of validated threat activity identified 46 data-breach incidents, 37 data-leak incidents and 33 credit-card-related incidents, alongside hacktivism, DDoS, web exploitation and ransomware a...

Deepfakes didn't stay a disinformation problem; they've become a manufacturing supply chain risk. Our latest cyber threat intelligence report breaks down what's actually happening on the ground: Executive impersonation fraud is scaling fast: Arup lost $25M after attackers ran a live video call where every "executive" on screen was AI-generated. Pindrop tracked a 1,210% rise in AI-driven fraud attacks across major U.S. customers. Blended-channel attacks are beating single-channel checks: a ...