Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-08-19 ⋅ abuse.ch ⋅ abuse.ch
MalwareBazaar | SHA256 9768b7e31324805672cfcba91cf4d6da91494e9899db58f22da9dda6c91931d6 (NeedleStealer)
NeedleStealer
2026-08-17 ⋅ Zscaler ⋅ Zscaler ThreatLabz
C2Looper: A New Backdoor Likely Tied To Ransomware With GitHub C2
C2Looper
2026-08-11 ⋅ abuse.ch ⋅ abuse.ch
MalwareBazaar | SHA256 29e97b2ae2e4c12dddaa69995462ffce950409f222242725f3aab323949ed8ee (HypeAgent)
HypeAgent
2026-08-10 ⋅ sonatype ⋅ Sonatype Research Team
Six npm Packages Use Ethereum Transactions to Retrieve Malicious Payloads
JADESNOW
2026-08-07 ⋅ ⋅ Kaspersky ⋅ Kaspersky
The APT group Head Mare exploits vulnerabilities in an unpatched TrueConf server to deliver PhantomCore and PhantomGraph malware to video conferencing participants
PhantomCore PhantomGraph
2026-08-03 ⋅ AhnLab ⋅ ASEC
Analysis of the Connection Between Xctdoor and Past CRAT Attack Cases (Larva-26005)
CRAT DRATzarus Larva-26005
2026-07-31 ⋅ Medium @prtheus ⋅ Prtheus
1337_GTWK Linux Malware Analysis
1337_GTWK
2026-07-31 ⋅ Microsoft Threat Intelligence
CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft
ChocoShell CornFlake Storm-2945
2026-07-30 ⋅ AhnLab ⋅ AhnLab
[Joint Cybersecurity Advisory] Operation Double Barrel (The Relationship Between a State-Sponsored Threat Actor and the Gunra Ransomware Group)
Gunra
2026-07-30 ⋅ Prtheus
Linux Malware 1337_GWTK Server Analysis
1337_GTWK
2026-07-29 ⋅ SafeDep ⋅ SafeDep Team
Joyfill npm Packages Compromised with Blockchain C2 Loader
JADESNOW
2026-07-28 ⋅ StepSecurity ⋅ Varun Sharma
Compromised npm Packages: @joyfill/components and @joyfill/layouts Ship an Obfuscated Remote Access Trojan
JADESNOW
2026-07-28 ⋅ Socket ⋅ Socket Research Team
Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan
JADESNOW
2026-07-28 ⋅ Hunt.io ⋅ Hunt.io
Flying Eagle Android RAT: Leaked Source Code, 170 Active Servers, and a New Platform Called Night Dragon
2026-07-27 ⋅ Intezer ⋅ Joakim Kennedy
Two Trojan Families Trotting in Through Google Search Ads
2026-07-27 ⋅ Intrusiontruth ⋅ Intrusiontruth
Dear Diary, Today I found a Ghost in the Network
2026-07-27 ⋅ Medium (@billmarczak) ⋅ Bill Marczak
An Angry Spark, or a Triangle in Disguise?
TriangleDB
2026-07-27 ⋅ Netresec ⋅ Erik Hjelmvik
PureLogs, PureRAT and misleading zgRAT
PureLogs Stealer PureRAT zgRAT
2026-07-24 ⋅ JUMPSEC LABS ⋅ JUMPSEC
Inside a DPRK BlueNoroff ClickFix Kit
2026-07-24 ⋅ Daily NK ⋅ Yoon HyeSeong
North Korea busts elite hacking ring inside its own banks