Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-01-14 ⋅ S2W Inc. ⋅ Byeongyeol An
Detailed Analysis of DragonForce Ransomware
DragonForce
2025-09-09 ⋅ S2W Inc. ⋅ S2W TALON
Kimsuky’s Use of GitHub for Malware Delivery and Exfiltration
RandomQuery
2024-08-22 ⋅ S2W Inc. ⋅ S2W
Analysis of the North Korea-backed puNK-003’s Lilith RAT ported to AutoIt Script
Lilith puNK-003
2024-02-07 ⋅ Medium s2wlab ⋅ Jiho Kim, Sebin Lee
Kimsuky disguised as a Korean company signed with a valid certificate to distribute Troll Stealer
AlphaSeed Appleseed Troll Stealer
2024-01-16 ⋅ S2W LAB Inc. ⋅ Minyeop Choi
Detailed Analysis of DarkGate; Investigating new top-trend backdoor malware
DarkGate
2024-01-05 ⋅ ⋅ Medium s2wlab ⋅ HOTSAUCE, S2W TALON
Story of H2 2023: A Deep Dive into Data Leakage and Commerce in Chinese Telegram
2023-05-17 ⋅ ⋅ S2W LAB Inc. ⋅ BLKSMTH
Detailed Analysis of AlphaSeed, a new version of Kimsuky’s AppleSeed written in Golang
AlphaSeed
2023-03-23 ⋅ Medium s2wlab ⋅ BLKSMTH, S2W TALON
Scarcruft Bolsters Arsenal for targeting individual Android devices
RambleOn RokRAT
2023-03-20 ⋅ ⋅ Medium s2wlab ⋅ HOTSAUCE, S2W TALON
Detailed Analysis of Cryptocurrency Phishing Through Famous YouTube Channel Hacking
2023-03-17 ⋅ Medium s2wlab ⋅ BLKSMTH, S2W TALON
Kimsuky group appears to be exploiting OneNote like the cybercrime group
2023-02-27 ⋅ Medium s2wlab ⋅ Jiho Kim, Lee Sebin
Lumma Stealer targets YouTubers via Spear-phishing Email
Lumma Stealer
2022-10-24 ⋅ Medium s2wlab ⋅ Lee Sebin, Shin Yeongjae
Unveil the evolution of Kimsuky targeting Android devices with newly discovered mobile malware
FastFire FastSpy
2022-09-22 ⋅ Medium s2wlab ⋅ Jeong Hyunsik, Yang HuiSeong
Quick Overview of Leaked LockBit 3.0 (Black) builder program
LockBit
2022-07-06 ⋅ Medium s2wlab ⋅ HOTSAUCE | S2W TALON
变脸, Teng Snake (a.k.a. Code Core)
CodeCore Xiaoqiying
2022-06-16 ⋅ Medium s2wlab ⋅ S2W TALON
Raccoon Stealer is Back with a New Version
Raccoon
2022-05-12 ⋅ Medium s2wlab ⋅ Jiho Kim
The History of BlackGuard Stealer
BlackGuard
2022-04-01 ⋅ Medium s2wlab ⋅ Jiho Kim
Rising Stealer in Q1 2022: BlackGuard Stealer
BlackGuard
2022-03-24 ⋅ ⋅ Medium s2wlab ⋅ S2W TALON
Footsteps of the LAPSUS$ hacking group
2022-03-03 ⋅ Medium s2wlab ⋅ Jiho Kim
Deep Analysis of Redline Stealer: Leaked Credential with WCF
RedLine Stealer
2022-02-17 ⋅ Medium s2wlab ⋅ S2W TALON
Tracking SugarLocker ransomware & operator
Sugar