Click here to download all references as Bib-File.
| 2022-05-12 ⋅ Medium s2wlab ⋅ The History of BlackGuard Stealer BlackGuard |
| 2022-04-01 ⋅ Medium s2wlab ⋅ Rising Stealer in Q1 2022: BlackGuard Stealer BlackGuard |
| 2022-03-24 ⋅ Medium s2wlab ⋅ Footsteps of the LAPSUS$ hacking group |
| 2022-03-03 ⋅ Medium s2wlab ⋅ Deep Analysis of Redline Stealer: Leaked Credential with WCF RedLine Stealer |
| 2022-02-17 ⋅ Medium s2wlab ⋅ Tracking SugarLocker ransomware & operator Sugar |
| 2022-02-16 ⋅ Medium s2wlab ⋅ Post Mortem of KlaySwap Incident through BGP Hijacking | EN |
| 2021-12-14 ⋅ Medium s2wlab ⋅ Logs of Log4shell (CVE-2021-44228): log4j is ubiquitous Kinsing Mirai Tsunami |
| 2021-12-10 ⋅ Medium s2wlab ⋅ BlackCat: New Rust based ransomware borrowing BlackMatter’s configuration BlackCat BlackMatter |
| 2021-10-05 ⋅ Medium s2wlab ⋅ Prometheus x Spook: Prometheus ransomware rebranded Spook ransomware. Prometheus |
| 2021-09-09 ⋅ Medium s2wlab ⋅ Case Analysis of Suncrypt Ransomware Negotiation and Bitcoin Transaction SunCrypt |
| 2021-09-08 ⋅ Medium s2wlab ⋅ Groove’s thoughts on Blackmatter, Babuk, and cheese shortages in the Netherlands Babuk BlackMatter Babuk BlackMatter |
| 2021-09-01 ⋅ Medium s2wlab ⋅ BlackMatter x Babuk : Using the same web server for sharing leaked files Babuk BlackMatter Babuk BlackMatter |
| 2021-07-14 ⋅ Medium s2wlab ⋅ Matryoshka : Variant of ROKRAT, APT37 (Scarcruft) RokRAT |
| 2021-07-08 ⋅ Medium s2wlab ⋅ Analysis of Lazarus malware abusing Non-ActiveX Module in South Korea |
| 2021-07-07 ⋅ Medium s2wlab ⋅ Deep analysis of KPOT Stealer KPOT Stealer |
| 2021-06-23 ⋅ Medium s2wlab ⋅ Deep analysis of REvil Ransomware REvil |
| 2021-06-03 ⋅ Medium s2wlab ⋅ W1 Jun | EN | Story of the week: Ransomware on the Darkweb DarkSide Babuk DarkSide |
| 2021-05-28 ⋅ Medium s2wlab ⋅ Deep Analysis of Vidar Stealer Vidar |
| 2021-05-25 ⋅ Medium s2wlab ⋅ W4 May | EN | Story of the week: Ransomware on the Darkweb Babuk REvil |
| 2021-05-24 ⋅ Medium s2wlab ⋅ Deep Analysis of Raccoon Stealer Raccoon |