This repository is for the dissemination of IOCs, YARA rules and source code from threat intelligence reports published by the BlackBerry Threat Research & Intelligence team.

• For fully detailed reports including screenshots ➡️ Click here
• For brief blog style reports with assosciated IOCs ➡️ Click here
• For summaries and IOCs of fully detailed reports ➡️ Click here

YARA rules are uploaded when available to each respective blog / report folder, however if you wish to download only the rules, you can do so from the dedicated repo here. YARA Rules are to be used in accordance with the specified LICENSE.

If you’re battling malware or a threat, you’ve come to the right place, regardless of your existing BlackBerry relationship.

The BlackBerry Incident Response team is made up of world-class consultants dedicated to handling response and containment services for a wide range of incidents, including ransomware and Advanced Persistent Threat (APT) cases.

We have a global consulting team standing by to assist you, providing around-the-clock support where required, as well as local assistance.

Contact us here.

The BlackBerry Research & Intelligence team examines emerging and persistent threats, providing intelligence analysis for the benefit of defenders and the organisations they serve.

threat-research-and-intelligence is distributed under the Apache License. See LICENSE for more information.