Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-05-22 ⋅ Fox-IT ⋅ Mick Koomen, Yun Zheng Hu
RemotePE: The Lazarus RAT that lives in memory
DPAPILoader RemotePE
2025-09-01 ⋅ Fox-IT ⋅ Mick Koomen, Yun Zheng Hu
Three Lazarus RATs coming for your cheese
SimpleTea POOLRAT ThemeForestRAT
2024-03-28 ⋅ Fox-IT ⋅ Joshua Kamp
Android Malware Vultur Expands Its Wingspan
Brunhilda Vultur
2022-06-29 ⋅ Fox-IT ⋅ Alberto Segura, Rolf Govers
Flubot: the evolution of a notorious Android Banking Malware
FluBot
2022-03-03 ⋅ Fox-IT ⋅ Alberto Segura, Rolf Govers
SharkBot: a “new” generation Android banking Trojan being distributed on Google Play Store
SharkBot
2021-06-14 ⋅ nccgroup ⋅ Fox-IT Data Science Team, NCCGroup
Incremental Machine Learning by Example: Detecting Suspicious Activity with Zeek Data Streams, River, and JA3 Hashes
2021-05-04 ⋅ Fox-IT ⋅ Fox IT, fumik0, the RIFT Team
RM3 – Curiosities of the wildest banking malware
ISFB
2021-01-12 ⋅ Fox-IT ⋅ Wouter Jansen
Abusing cloud services to fly under the radar
Cobalt Strike
2020-11-16 ⋅ Fox-IT ⋅ Anne Postma, Antonis Terefos, Tera0017
TA505: A Brief History Of Their Time
Clop Get2 SDBbot TA505
2020-09-02 ⋅ Fox-IT ⋅ Joost Jansen
Machine learning from idea to reality: a PowerShell case study
2020-06-02 ⋅ Fox-IT ⋅ NCC RIFT, Nikolaos Pantazopoulos, Stefano Antenucci
In-depth analysis of the new Team9 malware family
BazarBackdoor
2019-12-19 ⋅ Fox-IT ⋅ Erik Schamper, Maarten van Dantzig
Operation Wocao: Shining a light on one of China’s hidden hacking groups
XServer
2019-12-19 ⋅ Fox-IT ⋅ Fox IT
Operation Wocao : Shining a light on one of China’s hidden hacking groups
APT20 Operation Wocao
2019-03-27 ⋅ Fox-IT ⋅ Antonio Parata, Stefano Antenucci
PsiXBot: The Evolution Of A Modular .NET Bot
PsiX
2019-02-26 ⋅ Fox-IT ⋅ Fox IT
Identifying Cobalt Strike team servers in the wild
Cobalt Strike
2018-08-09 ⋅ Fox-IT ⋅ Alfred Klason
Bokbot: The (re)birth of a banker
IcedID Vawtrak
2018-05-22 ⋅ Group-IB ⋅ Fox-IT, Group-IB
Anunak: APT against financial institutions
FIN7
2017-05-03 ⋅ Fox-IT ⋅ Jelle Vergeer, Krijn de Mik, Maarten van Dantzig, Mitchel Sahertian, Yun Zheng Hu
Snake: Coming soon in Mac OS X flavour
Uroburos
2016-06-15 ⋅ Fox-IT ⋅ Fox IT
Mofang: A politically motivated information stealing adversary
Mofang
2016-05-17 ⋅ Fox-IT ⋅ Danny Heppener, Erik de Jong, Krijn de Mik, Lennart Haagsma, Maarten van Dantzig, Martin van Hensbergen, Mitchel Sahertian, Yonathan Klijnsma, Yun Zheng Hu
Mofang: A politically motivated information stealing adversary
Shim RAT Mofang
2013-09-05 ⋅ Fox-IT ⋅ Fox IT
Large botnet cause of recent Tor network overload
Mevade