Click here to download all references as Bib-File.

Enter keywords to filter the library entries below or Propose new Entry
2023-05-17 ⋅ Group-IB ⋅ Nikita Rostovtsev, Joshua Penny, Yashraj Solanki
@online{rostovtsev:20230517:distinctive:c4bc5d4, author = {Nikita Rostovtsev and Joshua Penny and Yashraj Solanki}, title = {{The distinctive rattle of APT SideWinder}}, date = {2023-05-17}, organization = {Group-IB}, url = {https://www.group-ib.com/blog/hunting-sidewinder/}, language = {English}, urldate = {2023-05-17} } The distinctive rattle of APT SideWinder
SideWinder
2022-08-18 ⋅ Group-IB ⋅ Nikita Rostovtsev
@online{rostovtsev:20220818:apt41:57ffddb, author = {Nikita Rostovtsev}, title = {{APT41 World Tour 2021 on a tight schedule}}, date = {2022-08-18}, organization = {Group-IB}, url = {https://blog.group-ib.com/apt41-world-tour-2021}, language = {English}, urldate = {2022-08-18} } APT41 World Tour 2021 on a tight schedule
Cobalt Strike
2021-06-03 ⋅ Group-IB ⋅ Nikita Rostovtsev
@online{rostovtsev:20210603:fontpack:79d9762, author = {Nikita Rostovtsev}, title = {{FontPack: A dangerous update Attribution secrets: Who is behind stealing credentials and bank card data by asking to install fake Flash Player, browser or font updates?}}, date = {2021-06-03}, organization = {Group-IB}, url = {https://blog.group-ib.com/fontpack}, language = {English}, urldate = {2021-06-16} } FontPack: A dangerous update Attribution secrets: Who is behind stealing credentials and bank card data by asking to install fake Flash Player, browser or font updates?