Click here to download all references as Bib-File.
| 2022-12-08 ⋅ ThreatFabric ⋅ Zombinder: new obfuscation service used by Ermac, now distributed next to desktop stealers ERMAC Xenomorph |
| 2022-11-04 ⋅ Github (hktalent) ⋅ Behinder Mem Shell Behinder |
| 2022-09-01 ⋅ Zscaler ⋅ No Honor Among Thieves - Prynt Stealer’s Backdoor Exposed DarkEye Prynt Stealer WorldWind |
| 2022-08-01 ⋅ Zscaler ⋅ Technical Analysis of Industrial Spy Ransomware Industrial Spy |
| 2022-07-20 ⋅ Qianxin ⋅ The Sidewinder (APT-Q-39) uses Google Play to spread an analysis of malicious Android software SideWinder |
| 2022-07-14 ⋅ Sophos ⋅ BlackCat ransomware attacks not merely a byproduct of bad luck BlackCat BlackCat |
| 2022-07-13 ⋅ Check Point ⋅ A Hit is made: Suspected India-based Sidewinder APT successfully cyber attacks Pakistan military focused targets Unidentified 093 (Sidewinder) |
| 2022-06-30 ⋅ Blackberry ⋅ Threat Thursday: China-Based APT Plays Auto-Updater Card to Deliver WinDealer Malware WinDealer Red Nue |
| 2022-06-02 ⋅ Kaspersky Labs ⋅ WinDealer dealing on the side WinDealer Red Nue |
| 2022-06-02 ⋅ Kaspersky Labs ⋅ WinDealer dealing on the side WinDealer |
| 2022-06-01 ⋅ Group-IB ⋅ SideWinder.AntiBot.Script Analysis of SideWinder's new infrastructure and tool that narrows their reach to Pakistan |
| 2022-05-18 ⋅ Weixin ⋅ filesyncshell.dll hijacked? APT-C-24 Sidewinder Briefing on the Latest Attack Activity |
| 2022-01-06 ⋅ VMRay ⋅ Malware Analysis Spotlight: XLoader’ Cross-platform Support Utilizing XBinder Xloader |
| 2021-11-18 ⋅ Sophos ⋅ New ransomware actor uses password-protected archives to bypass encryption protection |
| 2021-10-26 ⋅ JPCERT/CC ⋅ Malware WinDealer used by LuoYu Attack Group WinDealer Red Nue |
| 2021-08-31 ⋅ ebryx ⋅ Exposing Sidewinder’s Arsenal against Windows |
| 2021-07-18 ⋅ CitizenLab ⋅ Independent Peer Review of Amnesty International’s Forensic Methods for Identifying Pegasus Spyware Chrysaor |
| 2021-07-04 ⋅ Sophos ⋅ Independence Day: REvil uses supply chain exploit to attack hundreds of businesses REvil |
| 2021-06-30 ⋅ Guardicore ⋅ SMB Worm “Indexsinas” Uses Lateral Movement to Infect Whole Networks |
| 2021-05-07 ⋅ MuddyWater: Binder Project (Part 2) |