Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2025-02-14 ⋅ Twitter (@DTCERT) ⋅ Deutsche Telekom CERT
Twitter Thread on a password-protected loader observed in a vishing campaign
Unidentified 120
2023-08-25 ⋅ Telekom ⋅ Fabian Marquardt
Shining some light on the DarkGate loader
DarkGate
2023-08-25 ⋅ Github (telekom-security) ⋅ Fabian Marquardt
DarkGate configuration extractor
DarkGate
2023-03-31 ⋅ Telekom ⋅ TR4xx
Moqhao masters new tricks
MoqHao
2021-09-14 ⋅ Telekom ⋅ Thomas Barabosch
Flubot’s Smishing Campaigns under the Microscope
Anatsa FluBot
2021-07-14 ⋅ Telekom ⋅ Nils Stünkel
LOCKDATA Auction – Another leak marketplace showing the recent shift of ransomware operators
Cryakl
2021-05-17 ⋅ Github (telekom-security) ⋅ Deutsche Telekom Security GmbH
icedid_analysis
IcedID
2021-05-17 ⋅ Telekom ⋅ Thomas Barabosch
Let’s set ice on fire: Hunting and detecting IcedID infections
IcedID
2020-12-17 ⋅ Telekom ⋅ Thomas Barabosch
Smokeloader is still alive and kickin’ – A new way to encrypt CC server URLs
SmokeLoader
2020-10-06 ⋅ Telekom ⋅ Thomas Barabosch
Eager Beaver: A Short Overview of the Restless Threat Actor TA505
Clop Get2 SDBbot TA505
2020-06-16 ⋅ Telekom ⋅ Thomas Barabosch
TA505 returns with a new bag of tricks
Clop Get2 SDBbot TA505
2020-06-08 ⋅ Christian Haschek's Blog ⋅ Christian Haschek
The A1 Telekom Austria Hack
2020-05-14 ⋅ Telekom ⋅ Thomas Barabosch
LOLSnif – Tracking Another Ursnif-Based Targeted Campaign
LOLSnif
2020-03-26 ⋅ Telekom ⋅ Thomas Barabosch
TA505's Box of Chocolate - On Hidden Gems packed with the TA505 Packer
Amadey Azorult Clop FlawedGrace Get2 SDBbot Silence TinyMet TA505
2020-03-06 ⋅ Telekom ⋅ Thomas Barabosch
Dissecting Emotet - Part 2
Emotet
2020-02-03 ⋅ Telekom ⋅ Thomas Barabosch
Dissecting Emotet – Part 1
Emotet
2020-01-14 ⋅ Telekom ⋅ Thomas Barabosch
Inside of CL0P’s ransomware operation
Clop Get2 SDBbot