Click here to download all references as Bib-File.•
| 2023-09-14
⋅
Mandiant
⋅
Why Are You Texting Me? UNC3944 Leverages SMS Phishing Campaigns for SIM Swapping, Ransomware, Extortion, and Notoriety BlackCat BlackCat Meduza Stealer RedLine Stealer Vidar |
| 2023-07-20
⋅
Mandiant
⋅
KillNet Showcases New Capabilities While Repeating Older Tactics BlueHornet Zarya |
| 2023-07-18
⋅
Mandiant
⋅
Stealth Mode: Chinese Cyber Espionage Actors Continue to Evolve Tactics to Avoid Detection BPFDoor SALTWATER SEASPY SideWalk ZuoRAT Daxin HyperBro HyperSSL Waterbear |
| 2023-03-09
⋅
Mandiant
⋅
Stealing the LIGHTSHOW (Part Two) — LIGHTSHIFT and LIGHTSHOW FudModule |
| 2023-03-09
⋅
Mandiant
⋅
Stealing the LIGHTSHOW (Part One) — North Korea's UNC2970 CLOUDBURST TOUCHMOVE TOUCHSHIFT UNC2970 |
| 2022-12-13
⋅
Mandiant
⋅
I Solemnly Swear My Driver Is Up to No Good: Hunting for Attestation Signed Malware POORTRY |
| 2022-10-26
⋅
Mandiant
⋅
Pro-PRC DRAGONBRIDGE Influence Campaign Leverages New TTPs to Aggressively Target U.S. Interests, Including Midterm Elections Dragonbridge |
| 2022-09-23
⋅
Mandiant
⋅
GRU: Rise of the (Telegram) MinIOns ArguePatch CaddyWiper XakNet |
| 2022-09-07
⋅
Mandiant
⋅
APT42: Crooked Charms, Cons and Compromises PINEFLOWER VINETHORN VBREVSHELL BROKEYOLK DOSTEALER GHAMBAR SILENTUPLOADER |
| 2022-09-07
⋅
Mandiant
⋅
APT42: Crooked Charms, Cons, and Compromises APT42 |
| 2022-06-02
⋅
Mandiant
⋅
To HADES and Back: UNC2165 Shifts to LOCKBIT to Evade Sanctions FAKEUPDATES Blister Cobalt Strike DoppelPaymer Dridex FriedEx Hades LockBit Macaw MimiKatz Phoenix Locker WastedLocker |