Click here to download all references as Bib-File.•
| 2026-01-29
⋅
Sekoia
⋅
Meet IClickFix: a widespread WordPress-targeting framework using the ClickFix tactic IClickFix |
| 2026-01-29
⋅
HarfangLab
⋅
RedKitten: AI-accelerated campaign targeting Iranian protests SloppyMIO |
| 2026-01-28
⋅
Proofpoint
⋅
Can’t stop, won’t stop: TA584 innovates initial access XWorm |
| 2026-01-28
⋅
Google
⋅
No Place Like Home Network: Disrupting the World's Largest Residential Proxy Network |
| 2026-01-28
⋅
Hunt.io
⋅
Exposed Open Directory Leaks a Full BYOB Deployment Across Windows, Linux, and macOS |
| 2026-01-28
⋅
ESET Research
⋅
Love? Actually: Fake dating app used as lure in targeted spyware campaign in Pakistan GhostChat |
| 2026-01-27
⋅
Zscaler
⋅
APT Attacks Target Indian Government Using SHEETCREEP, FIREPOWER, and MAILCREEP | Part 2 MAILCREEP SHEETCREEP |
| 2026-01-27
⋅
Google
⋅
Diverse Threat Actors Exploiting Critical WinRAR Vulnerability CVE-2025-8088 |
| 2026-01-26
⋅
CodeCrank
⋅
A LinkedIn Job Offer Tried to Install Malware on My Machine |
| 2026-01-26
⋅
Zscaler
⋅
APT Attacks Target Indian Government Using GOGITTER, GITSHELLPAD, and GOSHELL | Part 1 Cobalt Strike |
| 2026-01-23
⋅
ESET Research
⋅
ESET Research: Sandworm behind cyberattack on Poland’s power grid in late 2025 |
| 2026-01-23
⋅
Zero Day
⋅
Cyberattack Targeting Poland’s Energy Grid Used a Wiper |
| 2026-01-23
⋅
Bluesky (@esetresearch.bsky.social)
⋅
Post about DynoWiper activity |
| 2026-01-23
⋅
BlackPoint
⋅
Novel Fake CAPTCHA Chain Delivering Amatera Stealer ACR Stealer Amatera |
| 2026-01-23
⋅
Medium Ireneusz Tarnowski
⋅
SpyNote: Comprehensive Analysis of an Android Remote Access Trojan SpyNote |
| 2026-01-20
⋅
⋅
Rostelecom-Solar
⋅
ShadowRelay – a unique backdoor in the public sector ShadowPad SNAPPYBEE |
| 2026-01-20
⋅
Abstract Security
⋅
Contagious Interview: Tracking the VS Code Tasks Infection Vector BeaverTail InvisibleFerret |
| 2026-01-20
⋅
FalconFeeds
⋅
Inside Iran’s APT Network: Profiling the Most Active Iranian State‑Linked Threat Actors |
| 2026-01-20
⋅
Jamf Blog
⋅
Threat Actors Expand Abuse of Microsoft Visual Studio Code |
| 2026-01-16
⋅
WithSecure
⋅
To the past and beyond: Andariel’s latest arsenal and cyberattacks GopherRAT JelusRAT PetitPotato |