Read as article
ReversingLabs Caught Espionage Malware Months Early
By @sharedot · · 6 pages
- AI
- Cybersecurity
- Threat Detection
ReversingLabs' Spectra Detect flagged Midnight Blizzard-linked malware in July, nearly two months before Anthropic published its findings.
What Happened: An Award Win Built on an Early Catch
ReversingLabs announced on October 8, 2026 that its Spectra Detect platform was named Threat Detection Solution Provider of the Year in the 2026 CyberSecurity Breakthrough Awards, a program now in its tenth year. According to ReversingLabs, the platform combines deep file analysis with enterprise-scale processing, ingesting and analyzing up to 100 million files per day, deconstructing more than 400 file formats, and drawing on a corpus of more than 450 billion file reputation records. CEO Mario Vuksan said AI is changing how quickly attackers can rebuild and adapt their tools, increasing the volume security teams must analyze, and that Spectra Detect gives defenders the speed, depth, and coverage to keep pace.
Why It Is Surprising: Evidence Ahead of the Industry
The most striking claim in ReversingLabs' announcement concerns a Midnight Blizzard-linked espionage operation. After Anthropic published indicators associated with that operation in September, ReversingLabs reports that its researchers checked the indicators against historical telemetry and found both malware samples had first appeared on July 6 and July 10 — nearly two months before Anthropic's findings. According to ReversingLabs, one sample, a PowerShell stager, was classified as malicious within seconds of first appearing in its telemetry, yet more than three weeks later only 8 of 29 third-party antivirus scanners had flagged it.
The Evidence and Why Consensus Lags
ReversingLabs frames the gap between its July detections and the delayed industry response as the core argument for deep file analysis over reputation scores or signatures. By analyzing what a file is capable of doing rather than relying on a single reputation signal, security teams can identify threats faster, the company says — valuable when defenders cannot afford to wait for broad industry consensus before acting. The company states that both samples carried malicious results from its analysis components at approximately the time they were first processed. The underlying claim comes from ReversingLabs' own telemetry and threat research, so independent corroboration would strengthen the case.
The Stakes and What Comes Next
The win lands in a crowded award field: the 10th annual CyberSecurity Breakthrough Awards received thousands of nominations from organizations in more than 20 countries, according to PR Newswire's report on the program. Anjuna Security separately won the same program's Data Privacy Solution of the Year award for its Anjuna Northstar AI clean room, PR Newswire reports, underlining how confidential computing and detection platforms are converging on AI-era risk. For ReversingLabs, the award builds on investment in detecting threats hidden in complex files and software packages, supporting malware analysis, threat hunting, and incident response workflows. The broader question is whether early-telemetry approaches can keep pace as AI shortens attackers' rebuild cycles.