Click here to download all references as Bib-File.
| 2022-09-13 ⋅ AdvIntel ⋅ AdvIntel's State of Emotet aka "SpmTools" Displays Over Million Compromised Machines Through 2022 Conti Cobalt Strike Emotet Ryuk TrickBot |
| 2022-07-20 ⋅ Advanced Intelligence ⋅ Anatomy of Attack: Truth Behind the Costa Rica Government Ransomware 5-Day Intrusion Cobalt Strike |
| 2022-05-17 ⋅ Advanced Intelligence ⋅ Hydra with Three Heads: BlackByte & The Future of Ransomware Subsidiary Groups BlackByte Conti |
| 2022-02-16 ⋅ Advanced Intelligence ⋅ The TrickBot Saga’s Finale Has Aired: Spinoff is Already in the Works TrickBot |
| 2022-01-14 ⋅ Advanced Intelligence ⋅ Storm in "Safe Haven": Takeaways from Russian Authorities Takedown of REvil REvil REvil |
| 2021-12-17 ⋅ Advanced Intelligence ⋅ Ransomware Advisory: Log4Shell Exploitation for Initial Access & Lateral Movement Conti |
| 2021-11-20 ⋅ Advanced Intelligence ⋅ Corporate Loader "Emotet": History of "X" Project Return for Ransomware Emotet |
| 2021-09-29 ⋅ Advanced Intelligence ⋅ Backup “Removal” Solutions - From Conti Ransomware With Love Cobalt Strike Conti |
| 2021-09-09 ⋅ Advanced Intelligence ⋅ Groove VS Babuk; Groove Ransom Manifesto & RAMP Underground Platform Secret Inner Workings Babuk Babuk |
| 2021-08-26 ⋅ Advanced Intelligence ⋅ From Russia With… LockBit Ransomware: Inside Look & Preventive Solutions LockBit |
| 2021-08-17 ⋅ Advanced Intelligence ⋅ Hunting for Corporate Insurance Policies: Indicators of [Ransom] Exfiltration Cobalt Strike Conti |
| 2021-08-11 ⋅ Advanced Intelligence ⋅ Secret "Backdoor" Behind Conti Ransomware Operation: Introducing Atera Agent Cobalt Strike Conti |
| 2021-07-14 ⋅ Advanced Intelligence ⋅ REvil Vanishes From Underground - Infrastructure Down REvil |
| 2021-06-30 ⋅ Advanced Intelligence ⋅ Ransomware-&-CVE: Industry Insights Into Exclusive High-Value Target Adversarial Datasets BlackKingdom Ransomware Clop dearcry Hades REvil |
| 2021-06-16 ⋅ Advanced Intelligence ⋅ The Rise & Demise of Multi-Million Ransomware Business Empire Avaddon |
| 2021-06-08 ⋅ Advanced Intelligence ⋅ From QBot...with REvil Ransomware: Initial Attack Exposure of JBS QakBot REvil |
| 2021-05-14 ⋅ Advanced Intelligence ⋅ From Dawn to "Silent Night": "DarkSide Ransomware" Initial Attack Vector Evolution DarkSide |
| 2021-04-17 ⋅ Advanced Intelligence ⋅ Adversary Dossier: Ryuk Ransomware Anatomy of an Attack in 2021 Ryuk |
| 2021-02-01 ⋅ Twitter (@IntelAdvanced) ⋅ Tweet on Active Directory Exploitation by RYUK "one" group Ryuk |
| 2021-01-25 ⋅ Twitter (@IntelAdvanced) ⋅ Tweet on Ryuk Ransomware group's post exploitation tactics including usage of Keethief tool Ryuk |