Click here to download all references as Bib-File.•
| 2026-08-10
⋅
AhnLab
⋅
Attack Cases for Domestic Web Servers Running SoftEther VPN in Korea Larva-26010 |
| 2026-08-03
⋅
AhnLab
⋅
Analysis of the Connection Between Xctdoor and Past CRAT Attack Cases (Larva-26005) CRAT DRATzarus Larva-26005 |
| 2026-08-02
⋅
AhnLab
⋅
Analysis of a Phishing Email Attack Case by the Larva-24009 Threat Actor Quasar RAT Larva-24009 |
| 2026-07-30
⋅
AhnLab
⋅
[Joint Cybersecurity Advisory] Operation Double Barrel (The Relationship Between a State-Sponsored Threat Actor and the Gunra Ransomware Group) Bankshot Gunra PostNapTea |
| 2026-07-30
⋅
AhnLab
⋅
[Joint Cybersecurity Advisory] Operation Double Barrel (The Relationship Between a State-Sponsored Threat Actor and the Gunra Ransomware Group) Gunra |
| 2026-07-24
⋅
AhnLab
⋅
Case Study: Targeted Attack Case on an MS-SQL Server Involving the Installation of GotoHTTP and SoftEther VPN XMRIG Coinminer GoToHTTP HackBrowserData MimiKatz Monero Miner VShell xmrig Larva-26009 |
| 2026-05-10
⋅
AhnLab
⋅
April 2026 Dark Web Issue Trend Report ShadowByt3$ |
| 2026-03-20
⋅
AhnLab
⋅
Attack Targeting MS‑SQL Servers to Deploy the ICE Cloud Scanner (Larva-26002) Larva-26002 |
| 2026-03-10
⋅
⋅
AhnLab
⋅
Analysis of the Green Blood v2.0 ransomware, which is decryptable GreenBlood |
| 2026-01-19
⋅
AhnLab
⋅
Proxyware Disguised as Notepad++ Tool Larva‑25012 |
| 2025-11-17
⋅
AhnLab
⋅
NKNShell Malware Distributed via VPN Website Larva-24010 |
| 2025-09-15
⋅
AhnLab
⋅
From El Dorado to BlackLock: Inside a Fast-Rising RaaS Threat BlackLock |
| 2025-08-08
⋅
AhnLab
⋅
Distribution of SmartLoader Malware via Github Repository Disguised as a Legitimate Project Rhadamanthys SmartLoader |
| 2025-07-21
⋅
AhnLab
⋅
RokRAT Malware Using Malicious Hangul (.HWP) Documents RokRAT |
| 2025-05-16
⋅
AhnLab
⋅
DBatLoader (ModiLoader) Being Distributed to Turkish Users DBatLoader |
| 2025-04-30
⋅
⋅
AhnLab
⋅
(Larva-25003) Web server target IIS malware dissemination case Ghost RAT |
| 2025-04-22
⋅
AhnLab
⋅
Distribution of PebbleDash Malware in March 2025 AsyncRAT PEBBLEDASH |
| 2025-02-27
⋅
AhnLab
⋅
Phishing Email Attacks by the Larva-24005 Group Targeting Japan Larva-24005 |
| 2025-01-23
⋅
AhnLab
⋅
RID Hijacking Technique Utilized by Andariel Attack Group CreateHiddenAccount JuicyPotato |
| 2025-01-07
⋅
AhnLab
⋅
TA-ShadowCricket: The 13-Year Shadow Campaign Exposed Operation Shadow Force |