Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-10-28 ⋅ SOCRadar ⋅ SOCRadar
Automating Extortion: Inside an AI-Assisted n0n Ransomware Operation
2026-10-05 ⋅ Github (ksi-digital) ⋅ Christophe Hubert
"Ancient": a Linux IoT botnet with a custom ANCT C2 protocol
Ancient
2026-09-04 ⋅ Rapid7 ⋅ Rapid7 Labs
DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors
2026-08-31 ⋅ Group-IB ⋅ Julio Guapo Menezes, Miguel Salazar
Anatomy of BraZetsu: How Cybercriminals Fuel the Underground Ecosystem
bancos Ousaban Warsaw Exilware
2026-08-07 ⋅ ⋅ Kaspersky ⋅ Kaspersky
The APT group Head Mare exploits vulnerabilities in an unpatched TrueConf server to deliver PhantomCore and PhantomGraph malware to video conferencing participants
PhantomCore PhantomGraph
2026-07-29 ⋅ cocomelonc ⋅ cocomelonc
Malware development trick 61: Module stomping. Simple C example
2026-07-16 ⋅ cocomelonc ⋅ cocomelonc
Malware development trick 60: Function stomping (remote process). Simple C example
2026-07-01 ⋅ sysdig ⋅ Michael Clark
JADEPUFFER: Agentic ransomware for automated database extortion
JadePuffer
2026-06-28 ⋅ cocomelonc ⋅ cocomelonc
Malware development trick 59: Function stomping (current process). Simple C example
2026-06-16 ⋅ Huntress Labs ⋅ Anna Pham, Zach Rogers
Potemkin Loader & RMMProject - The Anatomy of a ClickFix Attack
EtherRAT Chisel Potemkin
2026-06-15 ⋅ DFIR.ch ⋅ Stephan Berger
Anatomy of a Deno-Based Proxy & RAT
2026-05-18 ⋅ Zynap ⋅ Oscar Gallego
Zynap’s Next-Gen Sandbox Redefines Automatic Malware Analysis
Black Basta HijackLoader
2026-05-14 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Kazuar: Anatomy of a nation-state botnet
Kazuar
2026-04-23 ⋅ Mandiant ⋅ Josh Kelley, JP Glab, Muhammad Umair, Tufail Ahmed
Snow Flurries: How UNC6692 Employed Social Engineering to Deploy a Custom Malware Suite
SNOWBASIN UNC6692
2026-04-14 ⋅ Daniel Stepanic, Salim Bitam, Samir Bousseaden
Phantom in the vault: Obsidian abused to deliver PhantomPulse RAT
PHANTOMPULL PHANTOMPULSE
2026-04-13 ⋅ Dark Web Informer ⋅ Dark Web Informer
Polish Eco-Friendly Retailer VegeHome Suffers Data Breach Exposing 100K+ Customers
LulzIntel
2026-04-02 ⋅ Cisco Talos ⋅ Asheer Malhotra, Brandon White
UAT-10608: Inside a large-scale automated credential harvesting operation targeting web applications
UAT-10608
2026-03-26 ⋅ The Record ⋅ Daryna Antoniuk
Pro-Ukraine hacker group Bearlyfy targets Russian companies with custom ransomware
Babuk LockBit Bearlyfy
2026-03-26 ⋅ Darktrace ⋅ Isabel Evans
Phantom Footprints: Tracking GhostSocks Malware
GhostSocks Lumma Stealer
2026-03-23 ⋅ Netomize ⋅ Mohamad Mokbel
Detect SnappyClient C&C Traffic Using PacketSmith + Yara-X Detection Module
SnappyClient