Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-10-09 ⋅ abuse.ch ⋅ abuse.ch
MalwareBazaar | SHA256 2dda0c1d9f63287c19663780ba88e731b4530568a65d5886cfc6a416d805926e (WARDENStealer)
WARDENStealer
2026-10-07 ⋅ Censys ⋅ Aidan Holland
DarkSword/Coruna Open Directory Finding Report
Coruna GHOSTBLADE
2026-10-07 ⋅ CrowdStrike ⋅ Ashley Campion
Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance
2026-10-07 ⋅ SOCRadar ⋅ SOCRadar
NetScaler C2: A Massive CVE-2026-88771 Exploitation Operation
2026-10-06 ⋅ Huntress Labs ⋅ Harlan Carvey, Lindsey O'Donnell-Welch
Up a Creek Without a Command Line: Mapping an Akira Ransomware Attack
Akira Akira
2026-10-05 ⋅ Github (ksi-digital) ⋅ Christophe Hubert
"Ancient": a Linux IoT botnet with a custom ANCT C2 protocol
Ancient
2026-10-04 ⋅ Github (Yavuzhanzgen) ⋅ Yavuzhan Özgen
XenoRAT Technical Analysis Report
XenoRAT
2026-10-04 ⋅ Hexastrike Cybersecurity ⋅ Maurice Fielenbach
FLEXRAT – ChilloutVR Lures, Shared Secrets, and an OPSEC Hangover
FLEXRAT
2026-10-02 ⋅ Github (0xAyb3rK) ⋅ Ayberk Cataloluk, Yavuzhan Özgen
Electron-Based Stealer Technical Analysis Report: BlossCraft Launcher
2026-10-01 ⋅ Symantec ⋅ Threat Hunter Team
Warlock Ransomware Attackers Hit Water and Telecom Operators
WarLock Storm-2603
2026-10-01 ⋅ Proofpoint ⋅ Mark Kelly, Proofpoint Threat Research Team
Hallucinating Credibility: China-Aligned TA419 Impersonates its Way into US AI Policy Circles
Evilginx TA419
2026-10-01 ⋅ Bleeping Computer ⋅ Lawrence Abrams
Police dismantle KillSec ransomware gang allegedly led by 16-year-old
2026-10-01 ⋅ Netskope ⋅ Jan Michael Alcantara, John Carlo Marquez, Vini Egerland
$100k in Crypto Drained by the Underground Operation
Vidar
2026-09-30 ⋅ Zscaler ⋅ Muhammed Irfan V A
2CLoader: A New Malware Loader Delivering Vidar and Remus
2CLoader Remus Vidar XWorm
2026-09-30 ⋅ Sophos ⋅ Sophos Counter Threat Unit Research Team
TerminalFix and Lorem Ipsum Loader enable covert tunneling
Lorem Ipsum
2026-09-29 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Star Blizzard refines phishing and malware delivery with the RedFlick technique
Evilginx NOROBOT YESROBOT
2026-09-29 ⋅ Google ⋅ Google Threat Intelligence Group, Mandiant
Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances
2026-09-28 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
NeedyMantis: Unpacking a post-compromise malware family used in targeted operations
NeedyMantis
2026-09-28 ⋅ KrebsOnSecurity ⋅ Brian Krebs
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
2026-09-25 ⋅ Google ⋅ Mandiant
ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft
reGeorg ShinyHunters