Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-07-27 ⋅ Medium (@billmarczak) ⋅ Bill Marczak
An Angry Spark, or a Triangle in Disguise?
TriangleDB
2026-07-15 ⋅ OpenSourceMalware ⋅ Paul McCarty
PolinRider Confirmed Footprint Grows 6.5x Since March
JADESNOW
2026-04-22 ⋅ Expel ⋅ Marcus Hutchins
Inside Lazarus: How North Korea uses AI to industrialize attacks on developers
BeaverTail OtterCookie InvisibleFerret HexagonalRodent
2026-04-01 ⋅ YouTube (Mandiant) ⋅ Josh Stroschein, Pierre-Marc Bureau
EP24 The Glupteba Takedown: What Happens When Botnet Operators Show Up in Court with Pierre-Marc Bureau
Glupteba
2026-03-11 ⋅ Bitdefender ⋅ Jade Brown
Bitdefender Threat Debrief | March 2026
ShadowByt3$
2026-03-02 ⋅ Talos ⋅ Cisco Talos
Update, March 13: Talos on the developing situation in the Middle East
Tsundere APTIran
2025-09-11 ⋅ Trend Micro ⋅ Armando Nathaniel Pedragoza, Emmanuel Panopio, Emmanuel Roll, Jeffrey Francis Bonaobra, Joshua Aquino, Joshua Lijandro Tsang, Marco Dela Vega, Melvin Singwa, Mohammed Malubay
EvilAI Operators Use AI-Generated Code and Fake Apps for Far-Reaching Attacks
TamperedChef
2025-09-05 ⋅ Kroll ⋅ Dave Truman, Marc Messer
FANCY BEAR GONEPOSTAL – Espionage Tool Provides Backdoor Access to Microsoft Outlook
GONEPOSTAL
2025-08-20 ⋅ Kroll ⋅ Marc Messer, Otavio Passos, Ryan Hicks
XWORM Returns to Haunt Systems with Ghost Crypt
XWorm
2025-06-16 ⋅ Trend Micro ⋅ Aira Marcelo, Gabriel Nicoleta, Jovit Samaniego, Mohamed Fahmy
Clone, Compile, Compromise: Water Curse’s Open-Source Malware Trap on GitHub
2025-06-12 ⋅ CitizenLab ⋅ Bill Marczak, John Scott-Railton
Graphite Caught: First Forensic Confirmation of Paragon’s iOS Mercenary Spyware Finds Journalists Targeted
2025-05-02 ⋅ Kroll ⋅ Dave Truman, George Glass, Marc Messer
Prelude: Crypto Heist Causes HAVOC
Havoc
2025-04-22 ⋅ AhnLab ⋅ ASEC
Distribution of PebbleDash Malware in March 2025
AsyncRAT PEBBLEDASH
2025-03-01 ⋅ ⋅ LeMagIT ⋅ Valéry Rieß-Marchive
Ransomware : de REvil à Black Basta, que sait-on de Tramp ?
Black Basta Black Basta
2024-12-12 ⋅ Kaspersky ⋅ Georgy Kucherin & Marc Rivero López
The Mask Has Been Unmasked Again
Careto
2024-09-24 ⋅ Virus Bulletin ⋅ Georgy Kucherin, Marc Rivero López
The Mask Has Been Unmasked Again
Careto
2024-08-20 ⋅ Kroll ⋅ Dan Cox, Marc Messer, Sarah Becker
FOG Ransomware Targets Higher Education
Fog
2024-05-14 ⋅ ESET Research ⋅ Marc-Etienne M.Léveillé
Ebury is alive but unseen: 400k Linux servers compromised for cryptocurrency theft and financial gain
Ebury
2024-05-13 ⋅ ESET Research ⋅ Marc-Etienne M.Léveillé
Ebury is alive but unseen: 400k Linux servers compromised for cryptocurrency theft and financial gain
Ebury
2024-03-21 ⋅ Mandiant ⋅ Adam Aprahamian, Austin Larsen, Dan Kelly, Marcin Siedlarz, Mathew Potaczek, Michael Raggi
Bringing Access Back — Initial Access Brokers Exploit F5 BIG-IP (CVE-2023-46747) and ScreenConnect
GOREVERSE SNOWLIGHT Sliver UNC5174