Click here to download all references as Bib-File.•
| 2024-07-11
⋅
Zscaler
⋅
MoonWalk: A deep dive into the updated arsenal of APT41 | Part 2 MoonWalk |
| 2024-07-10
⋅
Zscaler
⋅
DodgeBox: A deep dive into the updated arsenal of APT41 | Part 1 Cobalt Strike DUSTPAN DUSTTRAP |
| 2024-03-02
⋅
Twitter (@SinghSoodeep)
⋅
Tweet on WINELOADER targeting with German embassy themed lure WINELOADER |
| 2024-02-27
⋅
Zscaler
⋅
European diplomats targeted by SPIKEDWINE with WINELOADER WINELOADER SPIKEDWINE |
| 2023-09-12
⋅
Zscaler
⋅
A peek into APT36’s updated arsenal ElizaRAT |
| 2023-08-30
⋅
Zscaler
⋅
A Look Into DuckTail DUCKTAIL |
| 2023-08-10
⋅
Zscaler
⋅
JanelaRAT - Repurposed BX RAT variant targeting FinTech users in the LATAM region JanelaRAT |
| 2023-03-21
⋅
Zscaler
⋅
The Unintentional Leak: A glimpse into the attack vectors of APT37 Chinotto |
| 2022-11-21
⋅
Zscaler
⋅
Black Friday Alert: 4 Emerging Skimming Attacks to Watch for This Holiday Season magecart |
| 2022-11-03
⋅
Zscaler
⋅
APT-36 Uses New TTPs and New Tools to Target Indian Governmental Organizations LimePad |
| 2022-08-09
⋅
Zscaler
⋅
AiTM phishing attack targeting enterprise users of Gmail |
| 2022-08-02
⋅
Zscaler
⋅
Large-Scale AiTM Attack targeting enterprise users of Microsoft email services |
| 2022-06-27
⋅
Zscaler
⋅
Return of the Evilnum APT with updated TTPs and new targets EVILNUM EVILNUM |
| 2022-06-17
⋅
Zscaler
⋅
Resurgence of Voicemail-themed phishing attacks targeting key industry verticals in the US |
| 2022-05-19
⋅
Zscaler
⋅
Vidar distributed through backdoored Windows 11 downloads and abusing Telegram Vidar |
| 2022-04-26
⋅
Zscaler
⋅
A "Naver"-ending game of Lazarus APT |
| 2022-01-20
⋅
Zscaler
⋅
New espionage attack by Molerats APT targeting users in the Middle East Spark |
| 2021-09-09
⋅
Zscaler
⋅
CloudFall Targets Researchers and Scientists Invited to International Military Conferences in Central Asia and Eastern Europe |
| 2021-06-24
⋅
Zscaler
⋅
Demystifying the full attack chain of MineBridge RAT MINEBRIDGE |
| 2021-03-23
⋅
Zscaler
⋅
Low-volume multi-stage attack leveraging AzureEdge and Shopify CDNs |