Click here to download all references as Bib-File.•
| 2026-09-09
⋅
⋅
Koktevrat – wieloetapowy Android RAT dystrybuowany pod przykrywką aplikacji MandatGO Koktevrat |
| 2026-09-07
⋅
Github (Yavuzhanzgen)
⋅
BabylonRat Technical Analysis Report BabyLon RAT |
| 2026-09-02
⋅
Malware INFO
⋅
Fake GlobalProtect MSI Targets Myanmar Using Cloudflare and Google Sheets as C2 Unidentified 126 (GoogleSheets C2) |
| 2026-09-01
⋅
Elastic
⋅
REVSTEALER ramps up: analysis of up-and-coming infostealer RevStealer |
| 2026-08-30
⋅
Medium 0xzyadelzyat
⋅
Reverse Engineering the Auto-Color Linux Backdoor Auto-Color |
| 2026-08-27
⋅
Github (Yavuzhanzgen)
⋅
ScreenConnect Client Technical Analysis |
| 2026-08-27
⋅
Proofpoint
⋅
Carry-On Compromise: TA4922 Packs PackClient donut_injector |
| 2026-08-26
⋅
Microsoft
⋅
TerminalFix campaign deploys a reverse tunnel through multistage intrusion Lorem Ipsum |
| 2026-08-24
⋅
Field Effect
⋅
A ClickFix cluster: Observed activity from recent ClickFix campaigns Lorem Ipsum |
| 2026-08-21
⋅
Bitso Quetzal Team
⋅
North Korea’s Crypt: Hunting Ghosts StoatWaffle |
| 2026-08-21
⋅
Netresec
⋅
CNCMachineRMS C2 Protocol Babadeda |
| 2026-08-20
⋅
trendai
⋅
Prompting the Payload: How an npm Supply Chain Attack Delivers the RedC2 AI-Powered Linux Implant redshell |
| 2026-08-19
⋅
zimperium
⋅
The ToxicPanda Never Sleeps: ToxicPanda 2.0 Prepares its Next Strike on Mobile ToxicPanda |
| 2026-08-19
⋅
Bitdefender
⋅
SilkParasite: Tracking a China-Nexus APT Across Central Asia BloodAlchemy ShadowPad SNAPPYBEE SilkParasite |
| 2026-08-19
⋅
abuse.ch
⋅
MalwareBazaar | SHA256 9768b7e31324805672cfcba91cf4d6da91494e9899db58f22da9dda6c91931d6 (NeedleStealer) NeedleStealer |
| 2026-08-18
⋅
BitSight
⋅
Who Invited Aisuru to the LAN Party? Kimwolf Aisuru |
| 2026-08-18
⋅
Gen
⋅
WordlistLoader Delivering Amatera via ClearFake Campaigns ACR Stealer Amatera |
| 2026-08-17
⋅
Github (Yavuzhanzgen)
⋅
AsyncRAT Technical Analysis AsyncRAT |
| 2026-08-17
⋅
Zscaler
⋅
C2Looper: A New Backdoor Likely Tied To Ransomware With GitHub C2 C2Looper |
| 2026-08-15
⋅
neso.re
⋅
Borrowed Machinery: SnappyClient, HijackLoader, and a Shared Codebase? HijackLoader SnappyClient |