Click here to download all references as Bib-File.
| 2021-02-25 ⋅ DomainTools ⋅ The Continuous Conundrum of Cloud Atlas |
| 2021-02-25 ⋅ JPCERT/CC ⋅ Emotet Disruption and Outreach to Affected Users Emotet |
| 2021-02-25 ⋅ Microsoft ⋅ CodeQL queries to hunt for Solorigate activity SUNBURST |
| 2021-02-25 ⋅ Microsoft ⋅ Microsoft open sources CodeQL queries used to hunt for Solorigate activity SUNBURST |
| 2021-02-25 ⋅ 360 Total Security ⋅ DarkWorld Ransomware |
| 2021-02-25 ⋅ BrightTALK (FireEye) ⋅ Light in the Dark: Hunting for SUNBURST SUNBURST |
| 2021-02-25 ⋅ Kaspersky Labs ⋅ Lazarus targets defense industry with ThreatNeedle Volgmer |
| 2021-02-25 ⋅ Intezer ⋅ Year of the Gopher A 2020 Go Malware Round-Up WellMail elf.wellmess ArdaMax AsyncRAT CyberGate DarkComet Glupteba Nanocore RAT Nefilim Ransomware NjRAT Quasar RAT WellMess Zebrocy |
| 2021-02-25 ⋅ Recorded Future ⋅ The Business of Fraud: An Overview of How Cybercrime Gets Monetized |
| 2021-02-25 ⋅ Proofpoint ⋅ TA413 Leverages New FriarFox Browser Extension to Target the Gmail Accounts of Global Tibetan Organizations scanbox Sepulcher |
| 2021-02-25 ⋅ Minerva ⋅ Preventing AgentTelsa Infiltration Agent Tesla |
| 2021-02-25 ⋅ FireEye ⋅ So Unchill: Melting UNC2198 ICEDID to Ransomware Operations Cobalt Strike IcedID Maze SystemBC |
| 2021-02-24 ⋅ Malwarebytes ⋅ LazyScripter: From Empire to double RAT Octopus Koadic |
| 2021-02-24 ⋅ VMWare Carbon Black ⋅ Knock, knock, Neo. - Active C2 Discovery Using Protocol Emulation Cobalt Strike |
| 2021-02-24 ⋅ US-CERT ⋅ Malware Analysis Report (AR21-055A): Accellion FTA DEWMODE |
| 2021-02-24 ⋅ Allsafe ⋅ Malware Analysis at Scale - Defeating Emotet by Ghidra Emotet |
| 2021-02-24 ⋅ RiskIQ ⋅ Turkey Dog: Cerberus and Anubis Banking Trojans Target Turkish Speakers Anubis Cerberus |
| 2021-02-24 ⋅ US-CERT ⋅ Alert (AA21-055A): Exploitation of Accellion File Transfer Appliance |
| 2021-02-24 ⋅ A41APT case - Analysis of the Stealth APT Campaign Threatening Japan SodaMaster |
| 2021-02-24 ⋅ Bleeping Computer ⋅ NASA and the FAA were also breached by the SolarWinds hackers SUNBURST |