Threat ReportsTLP:AMBER
Latrodectus: The Black Widow Loader Quietly Replacing IcedID
Named after the black widow spider, Latrodectus is a lightweight but potent loader built by the people behind IcedID.
6 min readMalware
Expose The Invisible
Better Cyber Security
Our team sets the standards for the cybersecurity industry. We are visionaries, always delivering on time.
What we offer
Your Trusted IT Security Solution
01
Penetration Testing
Our penetration testing services replicate adversary tactics using black-box, gray-box, and white-box methodologies to uncover vulnerabilities before they can be exploited.
Read more02
End Point & Network Security
Our endpoint protection leverages exclusively in-house PowerShell and Bash scripts, each honed through hundreds of hours of research and development, to secure your enterprise devices.
Read more03
Incident Response
Our Incident Response service activates immediately upon detection of a threat, swiftly containing malicious activity to minimize downtime and limit impact.
Read more04
Threat Hunting
We leverage our own in-house threat-hunting platform, equipped with expertly-crafted query libraries tailored to your environment.
Read more05
Security Consultant
Our Security Consultant Services provide organizations with tailored cybersecurity strategies to safeguard their digital assets.
Read more06
Security Research
Our Security Research Services provide in-depth analysis and insights into the latest cyber threats, vulnerabilities, and attack methodologies.
Read moreWhy Alpha Cyber
Comprehensive Protection Strategies
We provide tailored protection built around your exact needs, for organizations worldwide. Our focus is simple: precision, reliability, and excellence in everything we do.
Uncompromising Excellence
We deliver high-quality, customized security solutions without compromise. Excellence is not optional, it is our baseline.
Dedicated team
A focused, experienced team committed to your safety. We work closely with every client to ensure real results and trusted defense.
24/7 Communication
Attacks do not wait for office hours, so neither does the line to us. You reach the people working on your environment, in whatever time zone you operate.
Trusted Defense95%
Resilient Protection90%
Digital Shield85%
Capability coverage as published by Alpha Cyber.
Threat intelligence
Latest Threat Reports
Adversary infrastructure, malware teardowns and copy-ready indicators, written by the people who ran the hunt.
Threat ReportsTLP:AMBER
CAKETAP and the Raspberry Pi Heist: How UNC2891 Tried to Rob a Bank From Inside Its Own Switch
UNC2891 cabled a 4G Raspberry Pi straight into a bank’s ATM network switch, hid its backdoor from forensic triage with a novel Linux bind-mount trick, and aimed…
6 min readAPT
Threat ReportsTLP:AMBER
Daxin Returns: A 13-Year-Old China-Linked Rootkit That Never Called Home
Symantec found the Daxin kernel rootkit still operational on a Taiwan manufacturing subsidiary in 2026, alongside a previously undocumented backdoor, Stupig, that runs SYSTEM commands from the Windows logon screen before anyone signs in.
6 min readAPT
Our knowledge base
We cover any topic related to cyber security
Threat Reports
Adversary infrastructure, malware teardowns and copy-ready IOCs.
Blog
Privacy, hardening and the security thinking behind our work.
News
What just happened, and whether it matters to you.
Case Studies
Engagements written up end to end, with the findings that mattered.
Threat ReportsTLP:AMBER
Latrodectus: The Black Widow Loader Quietly Replacing IcedID
Named after the black widow spider, Latrodectus is a lightweight but potent loader built by the people behind IcedID.
6 min readMalware
Threat ReportsTLP:AMBER
CAKETAP and the Raspberry Pi Heist: How UNC2891 Tried to Rob a Bank From Inside Its Own Switch
UNC2891 cabled a 4G Raspberry Pi straight into a bank’s ATM network switch, hid its backdoor from forensic triage with a novel Linux bind-mount trick, and aimed…
6 min readAPT
Threat ReportsTLP:AMBER
Daxin Returns: A 13-Year-Old China-Linked Rootkit That Never Called Home
Symantec found the Daxin kernel rootkit still operational on a Taiwan manufacturing subsidiary in 2026, alongside a previously undocumented backdoor, Stupig, that runs SYSTEM commands from the Windows logon screen before anyone signs in.
6 min readAPT
Testimonials
At Alpha Cyber, We Prioritize your Safety & Data Integrity.
Alpha Cyber performed a comprehensive and professional penetration testing of the server infrastructures, while demonstrating in-depth technical knowledge and an orderly work methodology. During the examination, relevant security findings were identified, which were presented in a clear and structured manner, along with applicable and gradual recommendations for improving the level of security and hardening the infrastructure.
Yachin Golan Heights DairiesHead of IT and Infrastructure Security Alpha Cyber has completed all the required amendments and implementations to the highest standards in no time. Consequently, we hired Alpha Cyber as our security team due to Alpha Cyber project, and we are very satisfied with the service they provide.
Blossom KCIT Manager Alpha Cyber has demonstrated strong technical skills coupled with a high level of self-learning ability. He works with diligence and responsibility, consistently delivering thorough and reliable results. His versatility enables him to successfully execute a wide range of projects.
AccentureSecurity Innovation Principal We reached out to Alpha Cyber for a prevention plan. He was super professional and proactive, took the time to walk our teams through everything, and made sure the key people were fully on board. Big thanks!
E AvitanNetingit
Contact
Talk to someone who has seen this before.
You speak directly to the people doing the work, wherever in the world you operate.
Or email [email protected]