Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-10-28 ⋅ SOCRadar ⋅ SOCRadar
Automating Extortion: Inside an AI-Assisted n0n Ransomware Operation
2026-10-26 ⋅ The Hacker News ⋅ Ravie Lakshmanan
Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More
Jingle Thief
2026-10-23 ⋅ SOCRadar ⋅ SOCRadar
Uncovering the AI-Driven Offensive Infrastructure of INC and The Gentlemen Ransomware Affiliates
INC Gentlemen INC
2026-10-23 ⋅ The Hacker News ⋅ Ravie Lakshmanan
Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
AdaptixC2 MimiKatz k0t
2026-10-23 ⋅ Medium shaddy43 ⋅ shaddy43
Breaking Akira's Clock: Recovering Files Without the Ransom Key
Akira
2026-10-22 ⋅ Varonis ⋅ Varonis Threat Labs
StealC Is Back, and This Time It's a RAT
Stadia
2026-10-21 ⋅ Group-IB ⋅ Nikolay Kichatov, Tsai Shun Ling
Stray Cat, Open Doors: How k0t Wanders Through the Network Edge
AdaptixC2 MimiKatz k0t
2026-10-21 ⋅ abuse.ch ⋅ abuse.ch
MalwareBazaar | SHA256 1c850a5b877770dd831c68e2b6c9681419e63533c2f04cf9bdfa8f7fa6756585 (MopsStealer)
MopsStealer
2026-10-19 ⋅ The Hacker News ⋅ Ravie Lakshmanan
Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic
AMOS REF8801
2026-10-19 ⋅ The Hacker News ⋅ Ravie Lakshmanan
GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories
GhostAction
2026-10-19 ⋅ rexorvc0 ⋅ Aaron Jornet, Aaron Jornet Sales, vc0RExor
Inside DarkVision RAT
DarkVision RAT
2026-10-16 ⋅ OpenSourceMalware ⋅ OpenSourceMalware
GhostAction Copycats PolinRider by Hiding a Stealer in a Fake Font File
GhostAction
2026-10-15 ⋅ ExaTrack ⋅ ExaTrack
APT28 PixyNetLoader update
PixyNetLoader
2026-10-15 ⋅ Infoblox ⋅ Infoblox Threat Intel
Inside Help TDS: Hotejka, Cloudflare Pages and Predictive Detection
DollyWay
2026-10-15 ⋅ ReversingLabs ⋅ Igor Lasic
How RL mapped a Midnight Blizzard-linked campaign from two hashes
ChocoShell CornFlake
2026-10-14 ⋅ Rogue Authority
A signed “crash handler” that only wakes up under the right name
Zalmoxis
2026-10-13 ⋅ Fox-IT ⋅ Yun Zheng Hu
Releasing the Cobalt Strike Beacon Corpus
Cobalt Strike
2026-10-12 ⋅ Elastic ⋅ Daniel Stepanic, Jia Yu Chan
Auditing the auditor: Unmasking Apex Accelerator
CloudSyncD
2026-10-12 ⋅ Elastic ⋅ Daniel Stepanic, Jia Yu Chan
Auditing the auditor: Unmasking Apex Accelerator
UACMe REF8801
2026-10-12 ⋅ SOCRadar ⋅ SOCRadar
Inside ICMacOS: From an Infostealer to a Persistent RAT
ICMacOS