Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2023-07-19 ⋅ Twitter (@h2jazi) ⋅ Hossein Jazi
Tweet on observation with Korean targeting, suspecting Lazarus
Unidentified 105
2023-05-10 ⋅ Malwarebytes ⋅ Hossein Jazi, Roberto Santos
Uncovering RedStinger - Undetected APT cyber operations in Eastern Europe since 2020
PowerMagic RedStinger
2022-08-03 ⋅ Malwarebytes ⋅ Ankur Saini, Hossein Jazi
Woody RAT: A new feature-rich malware spotted in the wild
Woody RAT
2022-07-13 ⋅ Malwarebytes Labs ⋅ Hossein Jazi, Roberto Santos
Cobalt Strikes again: UAC-0056 continues to target Ukraine in its latest campaign
Cobalt Strike
2022-04-05 ⋅ Malwarebytes Labs ⋅ Ankur Saini, Hossein Jazi, Jérôme Segura
Colibri Loader combines Task Scheduler and PowerShell in clever persistence technique
Colibri Loader Mars Stealer
2022-04-01 ⋅ Malwarebytes ⋅ Ankur Saini, Hossein Jazi, Roberto Santos
New UAC-0056 activity: There’s a Go Elephant in the room
GrimPlant SaintBear
2022-03-29 ⋅ Malwarebytes Labs ⋅ Hossein Jazi
New spear phishing campaign targets Russian dissidents
Unidentified PS 002 (RAT) Cobalt Strike
2022-01-27 ⋅ Malwarebytes Labs ⋅ Ankur Saini, Hossein Jazi
North Korea’s Lazarus APT leverages Windows Update client, GitHub in latest campaign
2021-12-02 ⋅ Malwarebytes ⋅ Hossein Jazi, Threat Intelligence Team
SideCopy APT: Connecting lures to victims, payloads to infrastructure
SideCopy
2021-11-12 ⋅ Malwarebytes ⋅ Hossein Jazi
A multi-stage PowerShell based attack targets Kazakhstan
Cobalt Strike
2021-08-20 ⋅ Malwarebytes ⋅ Hossein Jazi
New variant of Konni malware used in campaign targetting Russia
Konni
2021-07-28 ⋅ Malwarebytes ⋅ Hossein Jazi
Crimea “manifesto” deploys VBA Rat using double attack vectors
2021-06-01 ⋅ Malwarebytes ⋅ Hossein Jazi
Kimsuky APT continues to target South Korean government using AppleSeed backdoor
Appleseed
2021-04-19 ⋅ Malwarebytes ⋅ Hossein Jazi
Lazarus APT conceals malicious code within BMP image to drop its RAT
TigerLite
2021-04-19 ⋅ Malwarebytes ⋅ Hossein Jazi
Lazarus APT conceals malicious code within BMP image to drop its RAT
BISTROMATH
2021-04-06 ⋅ Malwarebytes ⋅ Hossein Jazi
Aurora campaign: Attacking Azerbaijan using multiple RATs
2021-03-05 ⋅ Malwarebytes ⋅ Hossein Jazi
New steganography attack targets Azerbaijan
2021-02-24 ⋅ Malwarebytes ⋅ Hossein Jazi
LazyScripter: From Empire to double RAT
Octopus Koadic
2021-01-06 ⋅ Malwarebytes ⋅ Hossein Jazi
Retrohunting APT37: North Korean APT used VBA self decode technique to inject RokRat
RokRAT
2020-10-28 ⋅ Malwarebytes ⋅ hasherezade, Hossein Jazi, Jérôme Segura, Marcelo Rivero
Fake COVID-19 survey hides ransomware in Canadian university attack
Vaggen
2020-10-12 ⋅ Malwarebytes Labs ⋅ Hossein Jazi, Jérôme Segura, Malwarebytes Threat Intelligence Team, Roberto Santos
Winnti APT group docks in Sri Lanka for new campaign
DBoxAgent SerialVlogger Winnti
2020-10-06 ⋅ Malwarebytes ⋅ Hossein Jazi, Jérôme Segura
Release the Kraken: Fileless APT attack abuses Windows Error Reporting service
2020-09-30 ⋅ Malwarebytes ⋅ Hossein Jazi, Jérôme Segura
Evasive Panda
MgBot BRONZE HIGHLAND Evasive Panda
2020-09-30 ⋅ Youtube (Virus Bulletin) ⋅ Hossein Jazi, Jérôme Segura
Evasive Panda
MgBot BRONZE HIGHLAND
2020-07-21 ⋅ Malwarebytes Labs ⋅ Hossein Jazi, Jérôme Segura
Chinese APT group targets India and Hong Kong using new variant of MgBot malware
MgBot BRONZE HIGHLAND
2020-07-21 ⋅ Malwarebytes ⋅ Hossein Jazi, Jérôme Segura
Chinese APT group targets India and Hong Kong using new variant of MgBot malware
KSREMOTE Cobalt Strike MgBot Evasive Panda
2020-06-17 ⋅ Malwarebytes ⋅ Hossein Jazi, Jérôme Segura
Multi-stage APT attack drops Cobalt Strike using Malleable C2 feature
Cobalt Strike
2020-06-03 ⋅ Malwarebytes ⋅ Hossein Jazi, Jérôme Segura
New LNK attack tied to Higaisa APT discovered
Higaisa
2020-05-06 ⋅ Malwarebytes ⋅ Hossein Jazi, Jérôme Segura, Thomas Reed
New Mac variant of Lazarus Dacls RAT distributed via Trojanized 2FA app
Dacls
2020-04-16 ⋅ Malwarebytes ⋅ Hossein Jazi
New AgentTesla variant steals WiFi credentials
Agent Tesla