Click here to download all references as Bib-File.•
| 2026-11-05
⋅
Mate Security
⋅
Fake Claude Code ads are installing AMOS on Macs AMOS |
| 2026-11-05
⋅
ExaTrack
⋅
SectopRat's GPULoader and VMLoader SectopRAT |
| 2026-11-05
⋅
Seguranca Informatica
⋅
Recorteiro: a Rust banking trojan that cuts holes in your screen and hides behind fake electricity bills in Portugal Recorteiro |
| 2026-11-04
⋅
Raiku Solutions
⋅
Green Proxy: a first look at an undocumented AiTM phishing-as-a-service platform Mirai Mirai |
| 2026-11-02
⋅
Github (cocomelonc)
⋅
Malware development trick 68: Module overloading. Simple C example |
| 2026-11-02
⋅
Aryaka Networks
⋅
Peeling Back the Layers of PowerShell Loader: Tracing a Multi-Stage Windows Payload Chain |
| 2026-10-30
⋅
The Hacker News
⋅
Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide BloodAlchemy FlowCloud Vapor Panda |
| 2026-10-30
⋅
Google
⋅
ARTEX and Friends: Enter Agentic Offensive Frameworks UNC7228 |
| 2026-10-29
⋅
Sophos
⋅
AI used in Aur0ra ransomware testing and execution GOLD OGRE |
| 2026-10-29
⋅
CrowdStrike
⋅
VAPOR PANDA Uses AI-Driven ARTEX to Grow Global Espionage Campaign Chisel BloodAlchemy Chisel Vapor Panda |
| 2026-10-29
⋅
The Hacker News
⋅
Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys UAT-11473 |
| 2026-10-28
⋅
Infostealers
⋅
38,628 Crypto Orders. 10,139 IPs. What Wagyu’s Alleged Leak Means for Monero Privacy. Whitearmor |
| 2026-10-28
⋅
Cisco Talos
⋅
Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN UAT-11473 |
| 2026-10-28
⋅
SOCRadar
⋅
Automating Extortion: Inside an AI-Assisted n0n Ransomware Operation |
| 2026-10-27
⋅
Github (cocomelonc)
⋅
Malware and cryptography 46 - a tiny neural distinguisher for Speck. C and PyTorch examples |
| 2026-10-27
⋅
ANY.RUN
⋅
SkyW4lker Exposed: A Growing Microsoft 365 Phishing Threat to American Enterprises |
| 2026-10-27
⋅
teiss
⋅
WhiteArmor ransomware group claims Hisense data theft, demands $5 million Whitearmor |
| 2026-10-27
⋅
The Hacker News
⋅
CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets Gentlemen CyberCartel |
| 2026-10-26
⋅
Github (cocomelonc)
⋅
Linux hacking part 12: LD_PRELOAD function interposition. Simple C examples |
| 2026-10-26
⋅
Arctic Wolf
⋅
Beyond the Inbox: How Threat Actors Abuse Microsoft Teams External Chat for Initial Access STAC4749 |