Click here to download all references as Bib-File.•
| 2025-04-01
⋅
ZW01f
⋅
Auto-color - Linux backdoor Auto-Color |
| 2025-03-28
⋅
Intrinsec
⋅
From espionage to PsyOps: Tracking operations and bulletproof providers of UACs in 2025 sLoad NetSupportManager RAT Remcos SmokeLoader |
| 2025-03-26
⋅
ThreatMon
⋅
Raton / Silly - Remote Access Trojan | Technical Malware Analysis Report AsyncRAT |
| 2025-03-25
⋅
JPCERT/CC
⋅
Tempted to Classifying APT Actors: Practical Challenges of Attribution in the Case of Lazarus’s Subgroup |
| 2025-03-25
⋅
DomainTools
⋅
Phishing Campaign Targets Defense and Aerospace Firms Linked to Ukraine Conflict |
| 2025-03-25
⋅
Kaspersky Labs
⋅
Operation ForumTroll: APT attack with Google Chrome zero-day exploit chain |
| 2025-03-25
⋅
SpyCloud
⋅
On the Hunt for Ghost(Socks) GhostSocks |
| 2025-03-24
⋅
SYGNIA
⋅
Weaver Ant, the Web Shell Whisperer: Tracking a Live China-nexus Operation CHINACHOPPER reGeorg |
| 2025-03-18
⋅
Trellix
⋅
Analysis of Black Basta Ransomware Chat Leaks Black Basta Black Basta |
| 2025-03-18
⋅
Expel
⋅
Code-signing certificate abuse in the Black Basta chat leaks (and how to fight back) Black Basta Black Basta |
| 2025-03-18
⋅
WeLiveSecurity
⋅
Operation AkaiRyū: MirrorFace invites Europe to Expo 2025 and revives ANEL backdoor Anel AsyncRAT |
| 2025-03-17
⋅
Cloudflare
⋅
Black Basta’s blunder: exploiting the gang’s leaked chats Black Basta Black Basta |
| 2025-03-16
⋅
SYGNIA
⋅
Bybit – What We Know So Far |
| 2025-03-15
⋅
Github (TheRavenFile)
⋅
IoCs for Anubis Backdoor Anubis Backdoor |
| 2025-03-14
⋅
VitalDigitalForensics
⋅
Lumma Stealer – A tale that starts with a fake Captcha Lumma Stealer |
| 2025-03-14
⋅
Trend Micro
⋅
SocGholish’s Intrusion Techniques Facilitate Distribution of RansomHub Ransomware FAKEUPDATES RansomHub |
| 2025-03-14
⋅
Twitter (@CERTCyberdef)
⋅
Tweet on Emmenhtal v3 Emmenhtal Lumma Stealer Rhadamanthys |
| 2025-03-13
⋅
Securonix
⋅
Analyzing OBSCURE#BAT Threat Actors Lure Victims into Executing Malicious Batch Scripts to Deploy Stealthy Rootkits Quasar RAT r77 |
| 2025-03-13
⋅
EclecticIQ
⋅
Inside BRUTED: Black Basta (RaaS) Members Used Automated Brute Forcing Framework to Target Edge Network Devices Black Basta |
| 2025-03-13
⋅
Cyfirma
⋅
Tracking Ransomware: February 2025 LinkC Pub |