Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-10-22 ⋅ Varonis ⋅ Varonis Threat Labs
StealC Is Back, and This Time It's a RAT
Stadia
2026-10-19 ⋅ rexorvc0 ⋅ Aaron Jornet, Aaron Jornet Sales, vc0RExor
Inside DarkVision RAT
DarkVision RAT
2026-10-15 ⋅ ExaTrack ⋅ ExaTrack
APT28 PixyNetLoader update
PixyNetLoader
2026-10-15 ⋅ Infoblox ⋅ Infoblox Threat Intel
Inside Help TDS: Hotejka, Cloudflare Pages and Predictive Detection
DollyWay
2026-10-14 ⋅ Rogue Authority
A signed “crash handler” that only wakes up under the right name
Zalmoxis
2026-10-12 ⋅ Netresec ⋅ Erik Hjelmvik
Detecting AtlasRAT C2
Atlas RAT
2026-10-09 ⋅ Rogue Authority ⋅ Squiblydoo
A signed PDF viewer that quietly takes orders: the QuartzLine “zenith” backdoor
CLOUDHAZE
2026-10-08 ⋅ Gen Digital ⋅ Jan Rubín, Vojtěch Krejsa
Warden Stealer: The Rapid Rise of an Infostealer with an Appetite for AI Agent Data
WARDENStealer
2026-10-07 ⋅ cocomelonc ⋅ cocomelonc
Malware development trick 67: Run shellcode via CreateThreadpoolWait. C and assembly examples
2026-10-07 ⋅ CrowdStrike ⋅ Ashley Campion
Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance
2026-10-07 ⋅ SOCRadar ⋅ SOCRadar
NetScaler C2: A Massive CVE-2026-88771 Exploitation Operation
2026-10-06 ⋅ Huntress Labs ⋅ Harlan Carvey, Lindsey O'Donnell-Welch
Up a Creek Without a Command Line: Mapping an Akira Ransomware Attack
Akira Akira
2026-10-04 ⋅ Github (Yavuzhanzgen) ⋅ Yavuzhan Özgen
XenoRAT Technical Analysis Report
XenoRAT
2026-10-04 ⋅ Hexastrike Cybersecurity ⋅ Maurice Fielenbach
FLEXRAT – ChilloutVR Lures, Shared Secrets, and an OPSEC Hangover
FLEXRAT
2026-10-02 ⋅ Github (0xAyb3rK) ⋅ Ayberk Cataloluk, Yavuzhan Özgen
Electron-Based Stealer Technical Analysis Report: BlossCraft Launcher
2026-10-01 ⋅ Symantec ⋅ Threat Hunter Team
Warlock Ransomware Attackers Hit Water and Telecom Operators
WarLock Storm-2603
2026-10-01 ⋅ Proofpoint ⋅ Mark Kelly, Proofpoint Threat Research Team
Hallucinating Credibility: China-Aligned TA419 Impersonates its Way into US AI Policy Circles
Evilginx TA419
2026-10-01 ⋅ Netskope ⋅ Jan Michael Alcantara, John Carlo Marquez, Vini Egerland
$100k in Crypto Drained by the Underground Operation
Vidar
2026-09-30 ⋅ Sophos ⋅ Sophos Counter Threat Unit Research Team
TerminalFix and Lorem Ipsum Loader enable covert tunneling
Lorem Ipsum
2026-09-29 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Star Blizzard refines phishing and malware delivery with the RedFlick technique
Evilginx NOROBOT YESROBOT