CERT Threat Research
Some of Orange Cyberdefense CERT's publicly released research:
- A Pain in the Mist: Navigating Operation DreamJob’s arsenal
- Metappenzeller phishing campaign abuses AppSheet to drop possible Purelogs malware
- MinstLoader new variant in the wild since June 2025, removed obfuscation strings taken from Morison's book
- From SambaSpy to Sorillus: Dancing through a multi-language phishing campaign in Europe
- Orange Cyberdefense CSIRT discovers Craft CMS 0-day exploited in the wild
- Meet NailaoLocker: a ransomware distributed in Europe by ShadowPad and PlugX backdoors
- How China unites state, corporate, and academic assets for cyber offensive campaigns
- New Edam Dropper targets European energy sector, possible ties to Russian state-aligned adversaries
- Emmenhtal: A little-known loader distributing commodity infostealers worldwide
- Uncovering R0BL0CH0N TDS: An affiliate marketing scam
- Unvealing the depth of residential proxies providers
- Ivanti Connect Secure: Journey to the core of the DSLog backdoor
- PLAYing the game: uncovering Play ransomware
You can read all our public blog posts
here.
Don't hesitate to check the "Cybercrime Now" interactive map that provides a comprehensive view of the actors and their intricate interrelationships,
from our colleagues at Security Research Center here.
Don't hesitate to check our hosted page of VTproxy, to limit consumption of your VT Search quota.
In case you have questions or if you want to work with us, do
not hesitate to
get in touch.
More food for thought
Press Affairs
The Cybercrime Now graph is a free tool produced by Orange Cyberdefense on a best-effort to inform and educate. The graph application, exported images and text are all available to use free of charge as per the Terms of Use provided below.
We invite you to use the graph and the information contained therein to enhance your own research, presentations and writing, and ask only that you offer appropriate credit where its due.
Terms of Use
© Please credit any content used from Cybercrime Now to "Threat intelligence provided by Orange Cyberdefense 2024."
For any assistance, journalists can benefit from Orange Cyberdefense experts by contacting press contact: loic.djaffardjee@orangecyberdefense.com
This graph is an ongoing project, and we recognise that there will be errors and omissions, which we will endeavour to correct when we can. Please notify us of bugs, errors or suggestions by contacting us."
Legal Notice
Editor
Orange Cyberdefense SA
Société anonyme with registered share capital of 463.122.713
euros
RCS Nanterre 892377532
54 Place de l'Ellipse 92000 Nanterre, France
Phone: +33 1 44 44 22 22
Hosting provider
Google Cloud France
ROS Paris 881/21583
8 Rue de Londres, 75009 Paris, France
Publishing director
Hugues Foulon
Privacy Policy
This privacy policy describes how Orange Cyberdefense (”Orange Cyberdefense“ or “we”) collects and uses the personal data which you either leave through footprints and/or provide when you visit our website, orangecyberdefense.com, and use the various services and activities we offer.
- Collection of personal data
- Use of personal data, purpose and legal basis
- Retention
- Consent
- Security
- Your rights
- Links to other websites
- Amendments of this privacy policy
- Contact
1. Collection of personal data
We always inform you before we collect your personal data. We collect the following personal data about you: name, email address, telephone number, job title, company name, and food preferences. We may collect other personal data if deemed necessary to complete specific events. In such cases we will always inform you before collection the personal data.
Please note that some personal data is necessary to collect in order for you to use the functions of the website. Each of the relevant formulas will indicate whether it is mandatory or optional for you to provide the personal data. If providing the personal data is mandatory, the relevant field will be marked by a star (*). If you decide not to provide the personal data in question, you may not be able to use the function. For instance, you must provide your contact information in order for us to reply to a request from you.
If you provide personal data on other persons than yourself, you must ensure that you collect consent to provide us the personal data from the relevant persons.
Personal data will be collected when you use the activities listed below:
- When you subscribe to our newsletter
- When you download documents
- When you sign up for events
- When you sign up for our academy
- When you fill in a contact form for activities such as sales quotations and surveys
2. Use of personal data, purpose and legal basis
When you use our website personal data could be collected and may be used for the following purposes:
- Newsletters and other promotional communication
- Promotional marketing in general
- Handling requests received from you
- Providing customer support and communication
- Product and service development
- Statistics and analytics
- Administration of user accounts
The processing of your personal data will often be necessary to comply with your request or to perform our services. We note that Orange Cyberdefense will only use your personal data for marketing activities if you have given a prior and explicit consent to such use.
In certain circumstances and according to legislation it may be necessary to disclose data to public authorities. We may also disclose your personal data in order to establish, exercise or defend our legal rights. Furthermore, your personal data will be disclosed to all legal entities of Orange Cyberdefense (“Orange Cyberdefense”):
- Orange Cyberdefense Switzerland CH (Switzerland)
- Orange Cyberdefense Netherlands B.V. (The Netherlands)
- Orange Cyberdefense Belgium (Belgium)
- Orange Cyberdefense UK Limited (United Kingdom)
- Orange Cyberdefense Sweden AB (Sweden)
- Orange Cyberdefense Denmark A/S (Denmark)
- Orange Cyberdefense Norway AS (Norway)
- Orange Cyberdefense Germany GmbH (Germany)
- Orange Cyberdefense France (France)
- Orange Cyberdefense SA
Your personal data may be disclosed to legal entities of Orange Cyberdefense outside of the European Union under your express consent:
- Orange Cyberdefense South Africa (PTY) Ltd
- Orange Cyberdefense (Shanghai) Co., Ltd
In the event of reorganisation or total or partial sale of the business, disclosure, if any, will in such connection take place in accordance with the legislation governing such processing of personal data at the time in question and, if legally required, we will seek your consent.
Cookies
We use cookies on our website. You can learn more about our use of cookies in our Cookie Policy.
3. Retention
Orange Cyberdefense will delete your personal data when we no longer need your personal data in order to fulfill the above mentioned purposes. However, we may process your personal data for longer in an anonymized form or if we are obliged or entitled to do so pursuant to the legislation.
4. Consent
When you use our website, we sometimes collect and process your personal data based on your consent.
Please note that you may withdraw your consent at any time. Please contact us, if you wish to withdraw your consent.
If you wish to withdraw your consent as described above, please contact us (see contact information section 9 below).
If you withdraw your consent, we will stop the processing of your personal data, unless we are entitled or obliged to continue the processing or storage of your personal data on another legal basis, e.g. pursuant to legislation.
Withdrawal of your consent will not affect the lawfulness of the processing prior to the withdrawal.
If you withdraw your consent, you may not be able to use the functions offered on our website in full.
5. Security
We have implemented appropriate technical and organizational security measures to ensure an adequate security level and require that trusted third parties who process your personal information do the same. Accordingly, we use our best efforts to ensure the confidentiality and integrity of your personal data.
6. Your rights
You have a right of access to the personal data, which we process and store about you, subject to certain statutory exceptions.
Furthermore, you have the right to object to the collection and further processing of your personal data. Moreover, you have the right to rectification of your personal data, or to require us to restrict the processing of your personal data.
If you so request, we will erase the personal data which we have registered on you without undue delay, unless we may continue the processing on another legal basis, e.g. if the processing is necessary to defend a legal claim or to comply with a request from you.
Under certain circumstances, you may also request that we provide you with an overview of your personal data in a structured, commonly used and machine-readable format and request us to transmit such data to either you or to another data controller.
If you wish to exercise your rights as described above, please contact us (see contact information section 9 below).
In connection with requests regarding your rights, we kindly ask you to provide us with sufficient information in order for us to handle your request, including name and email address, and to identify you. If necessary, we may ask for further information. We will reply to your request as soon as possible and no later than one (1) month.
If you disagree with how we process your personal data or the purposes for which we process your personal data, you may either contact us, take legal actions at the ordinary courts or you may lodge a complaint with the data protection authority of your country.
7. Links to other websites
Our website may contain links to other websites. We are not responsible for the content of other websites (third party websites) or for the procedures of such third parties for collecting and processing personal data. If you visit a website of a third party, you should read the privacy policy and other relevant policies of the owner of the website.
8. Amendments of this Privacy Policy
We reserve the right to amend this privacy policy based on substantial changes in the legislation, new technical solutions, new or improved functions and to improve the website.
9. Contact
If you wish us to update, rectify or delete the personal data we have registered on you or if you have any questions regarding this privacy policy, you can contact us:
| Country | Name of the entity | Contact details |
|---|---|---|
| Belgium | Orange Cyberdefense Belgium | privacy@be.orangecyberdefense.com |
| China | Orange Cyberdefense China | TO BE FILLED IN |
| Denmark | Orange Cyberdefense Denmark A/S | privacy@dk.orangecyberdefense.com |
| France | Orange Cyberdefense France | dpo.ocd@orange.com |
| Germany | Orange Cyberdefense Germany GmbH | datenschutz@de.orangecyberdefense.com |
| Netherlands | Orange Cyberdefense Netherlands B.V. | privacy@nl.orangecyberdefense.com |
| Norway | Orange Cyberdefense Norway AS | privacy@no.orangecyberdefense.com |
| Sweden | Orange Cyberdefense Sweden AB | privacy@se.orangecyberdefense.com |
| Switzerland | Orange Cyberdefense CH | dpo@ch.orangecyberdefense.com |
| South Africa | Orange Cyberdefense South Africa (Pty) Ltd | comp@orangecyberdefense.com |
| United Kingdom | Orange Cyberdefense UK Limited | privacy@orangecyberdefense.com |
Version 1.0 - October 10th, 2024
Cookie Policy
A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first party cookies. We also use third party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts.
More specifically, we use cookies and other tracking technologies for the following purposes:
- Assisting you in navigation;
- Assisting in registration to our events and your ability to provide feedback;
- Analyzing your use of our site;
- Assisting with our promotional and marketing efforts.
Below is a detailed list of the cookies we use on our Website. Our Website is scanned with our cookie scanning tool regularly to maintain a list as accurate as possible. We classify cookies in the following categories:
- Strictly Necessary Cookies
- Performance Cookies
- Functional Cookies
- Targeting Cookies
Anti-corruption
Orange has zero tolerance towards corruption
We want to build tomorrow's digital world as a trusted and responsible company.
We are committed to building a healthy business environment that is delivered with integrity and in line with our Company's Code of Ethics; as part of this we adopt a policy of zero tolerance to corruption in all of our business activities across the Group.
This policy applies to all of us, including those who act on our behalf.
All management must take an active leadership role to create a culture where corruption cannot thrive and is unacceptable in all forms.
This Policy must be communicated widely, promoted strongly and supported with excellent training initiatives in order to ensure it is thoroughly understood and complied with by all.
Downloads
Disclaimer
Website Disclaimer
This website, together with its tools, is provided by Orange Cyberdefense on an “as is” basis. Orange Cyberdefense makes no representations or warranties of any kind, express or implied, as to the operation of the site, the information, content, materials, tools, services and/or products included on the website. Orange Cyberdefense disclaims, to the full extent permissible by applicable law, all warranties, express or implied, including but not limited to, implied warranties of merchantability and fitness for a particular purpose.
Orange Cyberdefense cannot be held liable for any damages of any kind arising from the use of this website and its tools, including but not limited to direct, indirect, incidental, punitive, and consequential damages.
Copyright
All content on this site, including text, graphics, logos, icons, images, audio clips, and software, is the property of Orange Cyberdefense, any legal entities of Orange Cyberdefense or its content suppliers and is protected by copyright laws. The compilation (meaning the collection, arrangement, and assembly) of all content on this site is the exclusive property of Orange Cyberdefense and is protected by copyright laws . All software used on this site is the property of Orange Cyberdefense, any legal entities of Orange Cyberdefense or its software suppliers and protected by copyright laws. The content and software on this site may be used as a resource, stating clear references. Any other use, including the reproduction, modification, distribution, transmission, republication, display, or performance, of the content on this site is strictly prohibited.
Trademarks
The Orange Cyberdefense name, Orange Cyberdefense logo and any other Orange Cyberdefense product or service names or logos used on the orangecyberdefense.com website are registered trademarks of Orange Brand Services Limited, a company of Orange group.
Connect with us
Visit, call or e-mail our global office
We are happy to help you during office hours and 24 hours a day
7 days a week at our incident response hotline.
54 Place de l'Ellipse
92983 Paris La Défense
+33 (0)1 46 53 53 53
info@orangecyberdefense.com
Facing an emergency right now? Call our
incident response hotline.