Blog

The Credential Economy: How Stolen Access Gets Bought and Sold

Many breaches begin with stolen access sold on underground markets. Learn how the credential economy works and how to spot the early warning

Preventable Paths: How INC Ransomware Continues to Thrive

INC Ransomware thrives on weak security—exploiting unpatched systems, poor credentials, and misconfigurations

Announcing the CTI-CMM Assessment Tool in Threatnote

Measure and improve CTI maturity with Threatnote’s new assessment tool, built on principles inspired by the CTI-CMM framework.

AI's Role in Modern Phishing

Blog about AI's role in modern day phishing

Phishing Campaigns Exploiting Legitimate Infrastructure

Phishing is evolving: attackers exploit link-wrapping and trusted infrastructure to bypass filters, adding malicious campaigns into workflow

GLOBAL Ransomware - New Tactics Revealed

GLOBAL is a RaaS group (mid-2025) tied to Mamona/BlackLock, targeting healthcare & manufacturing with AI tools and aggressive tactics.

How Threatnote Leverages STIX 2.1 for Comprehensive Threat Intelligence Analysis

See how Threatnote leverages STIX 2.1 across all domains in CTI

© 2025 Morado Intelligence

Privacy Policy Terms and Conditions morado@morado.io