Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-10-22 ⋅ Varonis ⋅ Varonis Threat Labs
StealC Is Back, and This Time It's a RAT
Stadia
2026-10-21 ⋅ abuse.ch ⋅ abuse.ch
MalwareBazaar | SHA256 1c850a5b877770dd831c68e2b6c9681419e63533c2f04cf9bdfa8f7fa6756585 (MopsStealer)
MopsStealer
2026-10-19 ⋅ rexorvc0 ⋅ Aaron Jornet, Aaron Jornet Sales, vc0RExor
Inside DarkVision RAT
DarkVision RAT
2026-10-15 ⋅ ExaTrack ⋅ ExaTrack
APT28 PixyNetLoader update
PixyNetLoader
2026-10-15 ⋅ Infoblox ⋅ Infoblox Threat Intel
Inside Help TDS: Hotejka, Cloudflare Pages and Predictive Detection
DollyWay
2026-10-15 ⋅ ReversingLabs ⋅ Igor Lasic
How RL mapped a Midnight Blizzard-linked campaign from two hashes
ChocoShell CornFlake
2026-10-14 ⋅ Rogue Authority
A signed “crash handler” that only wakes up under the right name
Zalmoxis
2026-10-13 ⋅ Fox-IT ⋅ Yun Zheng Hu
Releasing the Cobalt Strike Beacon Corpus
Cobalt Strike
2026-10-12 ⋅ Netresec ⋅ Erik Hjelmvik
Detecting AtlasRAT C2
Atlas RAT
2026-10-09 ⋅ Rogue Authority ⋅ Squiblydoo
A signed PDF viewer that quietly takes orders: the QuartzLine “zenith” backdoor
CLOUDHAZE
2026-10-09 ⋅ abuse.ch ⋅ abuse.ch
MalwareBazaar | SHA256 2dda0c1d9f63287c19663780ba88e731b4530568a65d5886cfc6a416d805926e (WARDENStealer)
WARDENStealer
2026-10-08 ⋅ Zscaler ⋅ Seongsu Park
Trojanized Terraform Provider Campaign
2026-10-08 ⋅ Gen Digital ⋅ Jan Rubín, Vojtěch Krejsa
Warden Stealer: The Rapid Rise of an Infostealer with an Appetite for AI Agent Data
WARDENStealer
2026-10-07 ⋅ cocomelonc ⋅ cocomelonc
Malware development trick 67: Run shellcode via CreateThreadpoolWait. C and assembly examples
2026-10-07 ⋅ Censys ⋅ Aidan Holland
DarkSword/Coruna Open Directory Finding Report
Coruna GHOSTBLADE
2026-10-07 ⋅ CrowdStrike ⋅ Ashley Campion
Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance
2026-10-07 ⋅ SOCRadar ⋅ SOCRadar
NetScaler C2: A Massive CVE-2026-88771 Exploitation Operation
2026-10-06 ⋅ SOCRadar ⋅ SOCRadar
CyberXero: An AI-Augmented Initial Access Broker Targeting Ukrainian Critical Infrastructure
2026-10-06 ⋅ Github (muha2xmad) ⋅ muha2xmad
Arabic Streaming Websites ClickFix Campaign
2026-10-06 ⋅ Huntress Labs ⋅ Harlan Carvey, Lindsey O'Donnell-Welch
Up a Creek Without a Command Line: Mapping an Akira Ransomware Attack
Akira Akira