{"id":39789393,"url":"https://github.com/blackberry/threat-research-and-intelligence","last_synced_at":"2026-01-18T12:13:55.645Z","repository":{"id":46086179,"uuid":"397930392","full_name":"blackberry/threat-research-and-intelligence","owner":"blackberry","description":"BlackBerry Threat Research \u0026 Intelligence","archived":false,"fork":false,"pushed_at":"2023-10-20T17:57:32.000Z","size":21252,"stargazers_count":88,"open_issues_count":0,"forks_count":14,"subscribers_count":13,"default_branch":"main","last_synced_at":"2024-04-09T14:59:54.240Z","etag":null,"topics":["artificial-intelligence","iocs","machine-learning","research","sigma-rules","suricata-rules","threatintelligence","yara-rules"],"latest_commit_sha":null,"homepage":"","language":"Jupyter Notebook","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/blackberry.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2021-08-19T12:09:46.000Z","updated_at":"2024-03-04T09:08:58.000Z","dependencies_parsed_at":"2023-02-17T05:31:17.559Z","dependency_job_id":null,"html_url":"https://github.com/blackberry/threat-research-and-intelligence","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/blackberry/threat-research-and-intelligence","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/blackberry%2Fthreat-research-and-intelligence","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/blackberry%2Fthreat-research-and-intelligence/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/blackberry%2Fthreat-research-and-intelligence/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/blackberry%2Fthreat-research-and-intelligence/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/blackberry","download_url":"https://codeload.github.com/blackberry/threat-research-and-intelligence/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/blackberry%2Fthreat-research-and-intelligence/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28535537,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-18T10:13:46.436Z","status":"ssl_error","status_checked_at":"2026-01-18T10:13:11.045Z","response_time":98,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["artificial-intelligence","iocs","machine-learning","research","sigma-rules","suricata-rules","threatintelligence","yara-rules"],"created_at":"2026-01-18T12:13:55.020Z","updated_at":"2026-01-18T12:13:55.629Z","avatar_url":"https://github.com/blackberry.png","language":"Jupyter Notebook","funding_links":[],"categories":[],"sub_categories":[],"readme":"![image](https://user-images.githubusercontent.com/7794663/217848699-225cb469-e4f7-434f-9413-3dbb499bd1ff.png)\n\n---\n\n\u003cdiv align=\"center\"\u003e\n\n[Full Intelligence Blogs][bbblogs]\u0026nbsp;\u0026nbsp;\u0026nbsp;|\u0026nbsp;\u0026nbsp;\u0026nbsp;[Blog Outcomes][blogs]\u0026nbsp;\u0026nbsp;\u0026nbsp;|\u0026nbsp;\u0026nbsp;\u0026nbsp;[Report Outcomes][reports]\u0026nbsp;\u0026nbsp;\u0026nbsp;|\u0026nbsp;\u0026nbsp;\u0026nbsp;[Public Talks][btalks]\u0026nbsp;\u0026nbsp;\u0026nbsp;\n\n\u003c/div\u003e\n\n---\n\n# :information_source: :: Overview\nThis repository is for the dissemination of IOCs, YARA rules and source code from threat intelligence reports published by the BlackBerry Threat Research \u0026 Intelligence team.\n\n- For fully detailed reports including screenshots :arrow_right: [Click here][bbblogs]\n- For brief blog style reports with assosciated IOCs :arrow_right: [Click here][blogs]\n- For summaries and IOCs of fully detailed reports :arrow_right: [Click here][reports]\n\n# :mag: :: YARA Rules\nYARA rules are uploaded when available to each respective blog / report folder, however if you wish to download only the rules, you can do so from the dedicated repo [here][yara_repo]. YARA Rules are to be used in accordance with the specified [LICENSE](LICENSE).\n\n# :sos: :: BlackBerry Assistance\nIf you’re battling malware or a threat, you’ve come to the right place, regardless of your existing BlackBerry relationship.\n\n[The BlackBerry Incident Response team](https://www.blackberry.com/us/en/services/incident-response) is made up of world-class consultants dedicated to handling response and containment services for a wide range of incidents, including ransomware and Advanced Persistent Threat (APT) cases.\n\nWe have a global consulting team standing by to assist you, providing around-the-clock support where required, as well as local assistance.  \n  \nContact us [here][ir_contact]. \n\n# :book: :: About the team\nThe BlackBerry Research \u0026 Intelligence team examines emerging and persistent threats, providing intelligence analysis for the benefit of defenders and the organisations they serve.\n\n\n# :memo: :: License\nthreat-research-and-intelligence is distributed under the Apache License. See [LICENSE](LICENSE) for more information.\n\n\n\u003c!--\nReference Links\n--\u003e\n[bbblogs]:https://blogs.blackberry.com/en/category/research-and-intelligence\n[blogs]:https://github.com/blackberry/threat-research-and-intelligence/tree/main/Blogs%20%26%20Reports/Blogs\n[reports]:https://github.com/blackberry/threat-research-and-intelligence/tree/main/Blogs%20%26%20Reports/Reports\n[yara_repo]:https://github.com/blackberry/threat-research-and-intelligence/search?l=yara\n[ir_contact]:https://www.blackberry.com/us/en/forms/cylance/handraiser/emergency-incident-response-containment\n[btalks]:https://github.com/blackberry/threat-research-and-intelligence/tree/main/Talks\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fblackberry%2Fthreat-research-and-intelligence","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fblackberry%2Fthreat-research-and-intelligence","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fblackberry%2Fthreat-research-and-intelligence/lists"}