Click here to download all references as Bib-File.•
| 2024-08-28
⋅
Talos Intelligence
⋅
BlackByte blends tried-and-true tradecraft with newly disclosed vulnerabilities to support ongoing attacks BlackByte |
| 2024-08-26
⋅
Netskope
⋅
Static Unpacker for Latrodectus Latrodectus |
| 2024-08-26
⋅
The DFIR Report
⋅
BlackSuit Ransomware BlackSuit Cobalt Strike SystemBC |
| 2024-08-20
⋅
Intel 471
⋅
Threat Hunting Case Study: Tracking Down GootLoader GootLoader |
| 2024-08-19
⋅
Aon
⋅
Unveiling "sedexp": A Stealthy Linux Malware Exploiting udev Rules sedexp |
| 2024-08-09
⋅
BreachNova
⋅
Full analysis on NJRAT NjRAT |
| 2024-08-08
⋅
cyble
⋅
Double Trouble: Latrodectus and ACR Stealer observed spreading via Google Authenticator Phishing Site ACR Stealer Latrodectus |
| 2024-08-05
⋅
BreachNova
⋅
How attacker achive Email Spoofing, Message Spoofing, IP and UserAgent Spoofing |
| 2024-08-01
⋅
Elastic
⋅
BITS and Bytes: Analyzing BITSLOTH, a newly identified backdoor BITSloth |
| 2024-07-31
⋅
Securonix
⋅
Research Update: Threat Actors Behind the DEV#POPPER Campaign Have Retooled and are Continuing to Target Software Developers via Social Engineering BeaverTail |
| 2024-07-30
⋅
HackRead
⋅
Hacker Scrapes and Publishes 100,000-Line CrowdStrike IoC List SAMBASPIDER |
| 2024-07-26
⋅
SOC Prime
⋅
UAC-0102 Phishing Attack Detection: Hackers Steal Authentication Data Impersonating the UKR.NET Web Service UAC-0102 |
| 2024-07-25
⋅
Blackberry
⋅
SideWinder Utilizes New Infrastructure to Target Ports and Maritime Facilities in the Mediterranean Sea |
| 2024-07-25
⋅
SOC Prime
⋅
UAC-0057 Attack Detection: A Surge in Adversary Activity Distributing PICASSOLOADER and Cobalt Strike Beacon Cobalt Strike PicassoLoader Ghostwriter |
| 2024-07-25
⋅
CrowdStrike
⋅
Hacktivist Entity USDoD Claims to Have Leaked CrowdStrike’s Threat Actor List SAMBASPIDER |
| 2024-07-24
⋅
Google
⋅
APT45: North Korea’s Digital Military Machine SHATTEREDGLASS APT45 |
| 2024-07-24
⋅
SOC Prime
⋅
UAC-0063 Attack Detection: Hackers Target Ukrainian Research Institutions Using HATVIBE, CHERRYSPY, and CVE-2024-23692 UAC-0063 |
| 2024-07-24
⋅
ThreatDown
⋅
Rhysida using Oyster Backdoor to deliver ransomware Broomstick Rhysida |
| 2024-07-23
⋅
Hunt.io
⋅
A Simple Approach to Discovering Oyster Backdoor Infrastructure Broomstick |
| 2024-07-23
⋅
K7 Security
⋅
Threat actors target recent Election Results Crimson RAT |