Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2023-10-25 ⋅ ESET Research ⋅ Matthieu Faou
Winter Vivern exploits zero-day vulnerability in Roundcube Webmail servers
Unidentified JS 006 (Winter Wyvern) Winter Vivern
2023-08-10 ⋅ ESET Research ⋅ Matthieu Faou
MoustachedBouncer AitM-powered surveillance via Belarus ISPs
NightClub
2023-08-10 ⋅ ESET Research ⋅ Matthieu Faou
MoustachedBouncer: Espionage against foreign diplomats in Belarus
NightClub MoustachedBouncer
2022-04-27 ⋅ ESET Research ⋅ Alexandre Côté Cyr, Matthieu Faou
A lookback under the TA410 umbrella: Its cyberespionage TTPs and activity
FlowCloud Lookback Witchetty
2021-11-16 ⋅ ESET Research ⋅ Matthieu Faou
Strategic web compromises in the Middle East with a pinch of Candiru
Caramel Tsunami Karkadann
2021-09-23 ⋅ ESET Research ⋅ Matthieu Faou, Tahseen Bin Taj
FamousSparrow: A suspicious hotel guest
SparrowDoor GhostEmperor
2021-06-09 ⋅ ESET Research ⋅ Matthieu Faou, Thomas Dupuy
Gelsemium: When threat actors go gardening
Gelsemium
2021-06-09 ⋅ ESET Research ⋅ Matthieu Faou, Thomas Dupuy
Gelsemium: When threat actors go gardening
Owlproxy
2021-04-29 ⋅ ESET Research ⋅ Andy Garth, Daniel Chromek, Matthieu Faou, Robert Lipovsky, Tony Anscombe
ESET Industry Report on Government: Targeted but not alone
Exaramel Crutch Exaramel HyperBro HyperSSL InvisiMole XDSpy
2021-03-10 ⋅ ESET Research ⋅ Mathieu Tartare, Matthieu Faou, Thomas Dupuy
Exchange servers under siege from at least 10 APT groups
Microcin MimiKatz PlugX Winnti APT27 APT41 Calypso Tick ToddyCat Tonto Team Vicious Panda
2021-02-01 ⋅ ESET Research ⋅ Ignacio Sanmillan, Matthieu Faou
Operation NightScout: Supply‑chain attack targets online gaming in Asia
Ghost RAT NoxPlayer Poison Ivy Red Dev 17
2020-12-17 ⋅ ESET Research ⋅ Ignacio Sanmillan, Matthieu Faou
Operation SignSight: Supply‑chain attack against a certification authority in Southeast Asia
SManager
2020-12-02 ⋅ ESET Research ⋅ Matthieu Faou
Turla Crutch: Keeping the “back door” open
Crutch Gazer Turla
2020-10-02 ⋅ ESET Research ⋅ Matthieu Faou
XDSpy: Stealing government secrets since 2011
XDSpy XDSpy
2020-10-01 ⋅ Github (eset) ⋅ Matthieu Faou
XDSpy Indicators of Compromise
XDSpy XDSpy
2020-09-30 ⋅ Virus Bulletin ⋅ Francis Labelle, Matthieu Faou
XDSPY: STEALING GOVERNMENT SECRETS SINCE 2011
XDSpy XDSpy
2020-09-02 ⋅ ESET Research ⋅ Alexandre Côté Cyr, Matthieu Faou
KryptoCibule: The multitasking multicurrency cryptostealer
KryptoCibule
2020-05-26 ⋅ ESET Research ⋅ Matthieu Faou
From Agent.BTZ to ComRAT v4: A ten‑year journey (White Paper)
Agent.BTZ
2020-05-26 ⋅ ESET Research ⋅ Matthieu Faou
From Agent.BTZ to ComRAT v4: A ten‑year journey
Agent.BTZ
2020-03-12 ⋅ ESET Research ⋅ Matthieu Faou
Tracking Turla: New backdoor delivered via Armenian watering holes
LightNeuron Mosquito NetFlash Skipper
2019-10-17 ⋅ ESET Research ⋅ Mathieu Tartare, Matthieu Faou, Thomas Dupuy
OPERATION GHOST The Dukes aren’t back — they never left
FatDuke
2019-05-29 ⋅ ESET Research ⋅ Matthieu Faou, Romain Dumont
A dive into Turla PowerShell usage
PowerShellRunner TurlaRPC
2019-05-07 ⋅ ESET Research ⋅ Matthieu Faou
Turla LightNeuron: An email too far
LightNeuron
2019-05-01 ⋅ ESET Research ⋅ Matthieu Faou
TURLA LIGHTNEURON: One email away from remote code execution
LightNeuron
2018-09-05 ⋅ ESET Research ⋅ Matthieu Faou
PowerPool malware exploits ALPC LPE zero‑day vulnerability
ALPC Local PrivEsc PowerPool
2017-07-20 ⋅ ESET Research ⋅ Frédéric Vachon, Matthieu Faou
Stantinko: A massive adware campaign operating covertly since 2012
Stantinko
2017-02-01 ⋅ ESET Research ⋅ Jean-Ian Boutin, Matthieu Faou
Read The Manual: A Guide to the RTM Banking Trojan
RTM RTM