EXPEL BLOG
First-time MDR adoption
Related Articles
Threat intel
Expel Quarterly Threat Report, Q3 2025: Threat intel recap
TL;DR In this blog we take a look back at critical activity we investigated during the quarter. One of the most prolific threat groups was BaoLoader, which comprised 13% of the non-targeted…
Threat intel
Expel Quarterly Threat Report, Q3 2025: Q3 by the numbers
TL;DR This is part one of two of our Quarterly Threat Report blog series for Q3 2025 You can find part two here; it covers the threat intel from Q3 Part one…
Threat intel
Certified OysterLoader: Tracking Rhysida ransomware gang activity via code-signing certificates
TL;DR There’s an ongoing malicious ad campaign delivering a malware called OysterLoader, previously known as Broomstick and CleanUpLoader The malware is an initial access tool (IAT) that gets onto devices to run…
SOC
Stories from the SOC: The curious case of termination notices
TL;DR Our new Stories from the SOC series shares real-world attacks that our SOC analysts see and stop on a regular basis. We recently encountered a phishing attack at a prominent university…