Cloudforce One

Threat research and operations

An embedded team of world-class threat researchers who analyze intelligence pulled from Cloudflare’s global network – one of the largest and most interconnected networks in the world – furthering our mission to help build a better Internet.

Threat insights from Cloudflare’s global network

Latest threat research

New SSA-themed phishing campaign installs trojanized ScreenConnect
New SSA-themed phishing campaign installs trojanized ScreenConnect

Threat report

Threat-intelligence Lumma Stealer report - thumbnail
Cloudflare participates in global operation to disrupt Lumma Stealer

Threat report

Loot, load, repeat: dissecting the Lumma Stealer playbook - Element resource image
Loot, load, repeat: dissecting the Lumma Stealer playbook

Threat brief

SVGs the hacker canvas - Asset image
SVGs: the hacker’s canvas

Threat spotlight

Black Basta’s blunder: exploiting the gang’s leaked chats
Black Basta’s blunder: exploiting the gang’s leaked chats

Threat brief

Bitcoin scams
Bitcoin to the moon: Trump endorsing, scammers exploiting

Threat spotlight

See all threat insights

bot scores orange
Access all research reports

Get updates from Cloudforce One

Unmatched threat intelligence services

Cloudforce One provides a powerful package of intelligence, tooling, and expertise to grant security teams an edge, making them smarter, more responsive, and more secure.

See all threat services