Cyber Defense - Made in Germany-Secuinfra GmbH

Deprecated: Method SplObjectStorage::contains() is deprecated since 8.5, use method SplObjectStorage::offsetExists() instead in /var/www/vhosts/secuinfra.com/testing2026/wp-content/plugins/the-events-calendar/src/Events/Custom_Tables/V1/WP_Query/Monitors/Query_Monitor.php on line 158

From ‘svchoss’ to P(a)yday

Felix Rothe
Deprecated: Method SplObjectStorage::contains() is deprecated since 8.5, use method SplObjectStorage::offsetExists() instead in /var/www/vhosts/secuinfra.com/testing2026/wp-content/plugins/the-events-calendar/src/Events/Custom_Tables/V1/WP_Query/Monitors/Query_Monitor.php on line 158

Deprecated: Method SplObjectStorage::contains() is deprecated since 8.5, use method SplObjectStorage::offsetExists() instead in /var/www/vhosts/secuinfra.com/testing2026/wp-content/plugins/the-events-calendar/src/Events/Custom_Tables/V1/WP_Query/Monitors/Query_Monitor.php on line 158
• 20.02.2026 | Incident Response

Alertness and vigilance are crucial in cybersecurity. When repeating this truism, most of us think about social engineering attacks and educating the user how to recognize a phishing mail or a scam call. However, an attentive user can also provide valuable insights on a more technical aspect. A recent incident response case was started, when the user noticed „strange black windows” on the desktop and took screenshots of them. This was accompanied by PayPal transfers from the user’s account, not authorized by the user.

Clickfix and Infostealers served fresh off the grill

SECUINFRA Falcon Team • 06.02.2026 | Incident Response

The incident showcased in this article was detected by the SECUINFRA Cyber Detection & Response Center (CDRC) as part of an MDR alert. The Falcon Team contributed relevant findings about the malware for handling and mitigation. This case serves as a good example of a complex "Clickfix"-style attack chain with steganographic elements.

Is your organization really prepared for a cyber incident?

Yasin Ilgar • 02.02.2026 | Incident Response

In today's rapidly evolving digital world, cyber threats are becoming increasingly sophisticated. An incident response plan is no longer an option, but a fundamental necessity. Many organizations rely on Managed Security Service Providers (MSSPs) to secure their operations, but it's important to recognize that outside expertise alone is not enough to eliminate all gaps in incident response.

Cisco IOS XE Vulnerability CVE-2023-20198 – thousands of internet-exposed devices potentially compromised!

SECUINFRA Falcon Team • 03.01.2024 | Incident Response

Edge infrastructure, such as internet-exposed firewalls, routers, VPN-Gateways etc. are a common initial access target for cybercrime and espionage actors since these appliances are challenging to defend. According to the vulnerability discovery service LeakIx as many as 30 thousand internet-exposed Cisco devices may already have been compromised...

Hide your Hypervisor: Analysis of ESXiArgs Ransomware

SECUINFRA Falcon Team • 07.02.2023 | Incident Response | Vulnerabilities

Today many businesses rely on virtualization technology to run and scale their infrastructure. One of the most popular Hypervisor systems on the market is VMware ESXi, which is regularly targeted in Ransomware attacks for the last 3+ years to increase damage to the victims IT systems.

Cyber attack successful – Which 3 disciplines of IT Security are needed now!

Evgen Blohm • Yasin Ilgar • 24.01.2023 | Compromise Assessment | Digital Forensics | Incident Response

In order to minimize monetary and reputational damage in the event of a successful IT security attack, immediate and correct response measures, a comprehensive overview of the extent of the cyber attack, and a full clarification of the incident are indispensable.