Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2023-05-17 ⋅ Sekoia ⋅ Félix Aime
APT28 leverages multiple phishing techniques to target Ukrainian civil society
2022-05-04 ⋅ Twitter (@felixw3000) ⋅ Felix
Twitter Thread with info on infection chain with IcedId, Cobalt Strike, and Hidden VNC.
Cobalt Strike IcedID PhotoLoader
2022-02-23 ⋅ Sophos ⋅ Abhijit Gupta, Anand Ajjan, Andrew Brandt, Colin Cowie, Felix Weyne, Rahil Shah, Steven Lott, Syed Zaidi, Vikas Singh, Xiaochuan Zhang
Dridex bots deliver Entropy ransomware in recent attacks
Entropy
2021-04-15 ⋅ Twitter (@felixw3000) ⋅ Felix
Tweet on Dridex's evasion technique
Dridex
2020-10-15 ⋅ Kaspersky Labs ⋅ Félix Aime, Ivan Kwiatkowski, Pierre Delcher
IAmTheKing and the SlothfulMedia malware family
SlothfulMedia
2020-07-28 ⋅ Kaspersky Labs ⋅ Félix Aime, Ivan Kwiatkowski, Pierre Delcher
Lazarus on the hunt for big game
Dacls Dacls Dacls VHD Ransomware
2020-03-31 ⋅ Kaspersky Labs ⋅ Félix Aime, Ivan Kwiatkowski, Pierre Delcher
Holy water: ongoing targeted water-holing attack in Asia
Godlike12
2020-03-23 ⋅ Kaspersky Labs ⋅ Félix Aime, Yury Namestnikov
Fin7 APT: how billion dollar crime ring remains active after leaders’ arrest
Carbanak
2019-06-02 ⋅ VMRay ⋅ Felix Seele
Hypervisor-based Analysis of macOS Malware
Coldroot RAT
2019-05-08 ⋅ Kaspersky Labs ⋅ Félix Aime, Yury Namestnikov
FIN7.5: the infamous cybercrime rig “FIN7” continues its activities
Griffon Ave Maria FIN7
2019-05-01 ⋅ Felix Weyne
Hancitor's Packer Damystified
Hancitor
2018-07-29 ⋅ Sophos ⋅ Felix Weyne
AdKoob information thief targets Facebook ad purchase info
AdKoob
2018-07-26 ⋅ FireEye ⋅ Swapnil Patil
Microsoft Office Vulnerabilities Used to Distribute FELIXROOT Backdoor in Recent Campaign
Felixroot
2016-08-01 ⋅ Uperesia ⋅ Felix Weyne
Analysis of a packed Pony downloader
Pony