Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-10-06 ⋅ Huntress Labs ⋅ Harlan Carvey, Lindsey O'Donnell-Welch
Up a Creek Without a Command Line: Mapping an Akira Ransomware Attack
Akira Akira
2026-10-01 ⋅ Symantec ⋅ Threat Hunter Team
Warlock Ransomware Attackers Hit Water and Telecom Operators
WarLock Storm-2603
2026-09-28 ⋅ KrebsOnSecurity ⋅ Brian Krebs
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
2026-09-25 ⋅ Google ⋅ Mandiant
ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft
reGeorg ShinyHunters
2026-08-26 ⋅ Abstract Security ⋅ Abstract Security Threat Research Organization (ASTRO)
RMM Hunting: Leveraging LOLRMM for Detection
2026-08-21 ⋅ Bitso Quetzal Team ⋅ Mauro Eldritch, Nelson Colon
North Korea’s Crypt: Hunting Ghosts
StoatWaffle
2026-07-28 ⋅ Hunt.io ⋅ Hunt.io
Flying Eagle Android RAT: Leaked Source Code, 170 Active Servers, and a New Platform Called Night Dragon
2026-07-22 ⋅ Huntress Labs ⋅ Michael Tigges
Inside FakeAgent: How a Claude Desktop Malvertising Campaign Hit 29 Organizations with SectopRAT
SectopRAT
2026-07-15 ⋅ Symantec ⋅ Threat Hunter Team
Daxin Returns: Stealthy Malware Resurfaces in Taiwan Alongside a New Backdoor
Daxin
2026-06-18 ⋅ Politie NL ⋅ Politie NL
International law enforcement initiate hunt on malware group SocGholish
FAKEUPDATES
2026-06-16 ⋅ Huntress Labs ⋅ Anna Pham, Zach Rogers
Potemkin Loader & RMMProject - The Anatomy of a ClickFix Attack
EtherRAT Chisel Potemkin
2026-06-15 ⋅ Medium (@mrtiepolo) ⋅ Gianluca Tiepolo
Operation Turb00 — Part 1: Analyzing and Hunting a Vidar Campaign
Vidar
2026-06-11 ⋅ Google ⋅ Mandiant
ShinyHunters Targets Education Sector with Oracle PeopleSoft Exploit
ShinyHunters
2026-05-21 ⋅ Symantec ⋅ Threat Hunter Team
GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses
win.beast MimiKatz Hyadina
2026-05-16 ⋅ Symantec ⋅ Threat Hunter Team
Fast16: Pre-Stuxnet Sabotage Tool Was Built to Subvert Nuclear Weapons Simulations
fast16
2026-05-12 ⋅ Symantec ⋅ Threat Hunter Team
Jewelbug: APT Group Runs Espionage and Crypto Fraud Operations Side by Side
Earth Alux REF7707
2026-05-05 ⋅ Red Asgard ⋅ Red Asgard
Hunting Lazarus Part VII: The Server That Was Not Just FTP
BeaverTail OtterCookie
2026-03-17 ⋅ Hunt.io ⋅ Hunt.io
Iranian Botnet Exposed via Open Directory: 15-Node Relay Network and Active C2
2026-03-11 ⋅ Hunt.io ⋅ Hunt.io
Operation Roundish: Uncovering an APT28 Roundcube Toolkit Used Against Ukrainian Government Targets
2026-03-05 ⋅ Symantec ⋅ Threat Hunter Team
Seedworm: Iranian APT on Networks of U.S. Bank, Airport, Software Company
Tsundere