Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-10-01 ⋅ Proofpoint ⋅ Mark Kelly, Proofpoint Threat Research Team
Hallucinating Credibility: China-Aligned TA419 Impersonates its Way into US AI Policy Circles
Evilginx TA419
2026-09-30 ⋅ Sophos ⋅ Sophos Counter Threat Unit Research Team
TerminalFix and Lorem Ipsum Loader enable covert tunneling
Lorem Ipsum
2026-09-03 ⋅ Abstract Security ⋅ Abstract Security Threat Research Organization (ASTRO)
Chaotic Eclipse Releases CrowdStrike Falcon Zero-Day FalconFlank: Detection Guidance
2026-09-02 ⋅ Malware INFO ⋅ Malware INFO Research Team
Fake GlobalProtect MSI Targets Myanmar Using Cloudflare and Google Sheets as C2
Unidentified 126 (GoogleSheets C2)
2026-08-27 ⋅ Proofpoint ⋅ Kyle Cucci, Proofpoint Threat Research Team, Rob Kinner, Tony Robinson
Carry-On Compromise: TA4922 Packs PackClient
donut_injector
2026-08-26 ⋅ Abstract Security ⋅ Abstract Security Threat Research Organization (ASTRO)
RMM Hunting: Leveraging LOLRMM for Detection
2026-08-10 ⋅ sonatype ⋅ Sonatype Research Team
Six npm Packages Use Ethereum Transactions to Retrieve Malicious Payloads
JADESNOW
2026-07-28 ⋅ Socket ⋅ Socket Research Team
Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan
JADESNOW
2026-07-07 ⋅ Proofpoint ⋅ Greg Lesnewich, Mark Kelly, Proofpoint Threat Research Team
One Email Closer to the Edge: UNK_MassTraction & the Physics of Exploitation
IceCube
2026-06-25 ⋅ Microsoft Security ⋅ Microsoft Defender Experts, Microsoft Defender Security Research Team, Parth Jomadkar
Photo ZIP campaign targeting hospitality industry delivers Node.js implant for persistent access
TonRAT
2026-06-17 ⋅ Microsoft ⋅ Microsoft Defender Research Team
From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet
2026-06-09 ⋅ Zscaler ⋅ ThreatLabZ research team
Technical Analysis of MLTBackdoor
MLTBackdoor
2026-06-03 ⋅ Proofpoint ⋅ Proofpoint Threat Research Team
TA4922: The Suspected Chinese Crime Group is Going Global
Atlas RAT RomulusLoader SilentRunLoader TA4922
2026-06-03 ⋅ sonatype ⋅ Sonatype Security Research Team
Lazarus Group's Latest: Brandjacking Campaign on npm
2026-05-31 ⋅ Gridinsoft ⋅ Gridinsoft Malware Research Team
DriveSurge Turns Trusted Websites Into ClickFix Malware Traps
DriveSurge
2026-05-18 ⋅ Microsoft ⋅ Microsoft Defender Security Research Team
How Storm-2949 turned a compromised identity into a cloud-wide breach
Storm-2949
2026-03-23 ⋅ Sophos ⋅ Sophos Counter Threat Unit Research Team
NICKEL ALLEY strategy: Fake it ‘til you make it
PylangGhost GolangGhost Nickel Alley
2026-03-19 ⋅ Sophos ⋅ Sophos Counter Threat Unit Research Team
Android devices ship with firmware-level malware
Keenadu
2026-03-11 ⋅ Microsoft ⋅ Microsoft Defender Experts, Microsoft Defender Security Research Team
Contagious Interview: Malware delivered through fake developer job interviews
BeaverTail OtterCookie StoatWaffle InvisibleFerret PylangGhost GolangGhost Contagious Interview
2026-03-09 ⋅ Abstract Security ⋅ Abstract Security Threat Research Organization (ASTRO)
Contagious Interview: Evolution of VS Code and Cursor Tasks Infection Chains Part 2
GolangGhost PylangGhost GolangGhost