Click here to download all references as Bib-File.•
| 2024-04-11
⋅
Twitter (@embee_research)
⋅
Tracking Malicious Infrastructure With DNS Records - Vultur Banking Trojan Vultur |
| 2024-04-04
⋅
Twitter (@embee_research)
⋅
TLS Certificate For Threat Intelligence - Identifying MatanBuchus Domains Through Hardcoded Certificate Values Matanbuchus |
| 2024-04-01
⋅
Twitter (@embee_research)
⋅
Passive DNS For Phishing Link Analysis - Identifying 36 Latrodectus Domains With Historical Records and 302 Redirects Unidentified 111 (Latrodectus) |
| 2024-03-31
⋅
Twitter (@fr0gger)
⋅
Tweet with visual summary of the execution flow xzbot |
| 2024-03-30
⋅
Twitter (@embee_research)
⋅
Uncovering APT Infrastructure with Passive DNS Pivoting |
| 2024-03-27
⋅
Twitter (@embee_research)
⋅
Uncovering Malicious Infrastructure with DNS Pivoting LokiBot XWorm |
| 2024-03-18
⋅
Twitter (@juanandres_gs)
⋅
Twitter thread on the sample identified AcidPour |
| 2024-03-02
⋅
Twitter (@SinghSoodeep)
⋅
Tweet on WINELOADER targeting with German embassy themed lure WINELOADER |
| 2024-02-28
⋅
Twitter (@haxrob)
⋅
Tweet series regarding GTPDOOR GTPDOOR |
| 2024-02-27
⋅
Twitter (@greglesnewich)
⋅
Tweet with context on TA421 / APT29 / Midnight Blizzard / BlueBravo / Cozy Bear WINELOADER |
| 2024-02-26
⋅
Twitter (@embee_research)
⋅
Advanced CyberChef Techniques for Configuration Extraction - Detailed Walkthrough and Examples NetSupportManager RAT |
| 2024-01-05
⋅
Twitter (@X__Junior)
⋅
Tweet about a SpectralBlur Linux sample SpectralBlur |
| 2024-01-05
⋅
Twitter (@greglesnewich)
⋅
Tweets about a SpectralBlur a macOS sample SpectralBlur |
| 2023-12-20
⋅
Twitter (@embee_research)
⋅
Defeating Obfuscated Malware Scripts - Cobalt Strike Cobalt Strike |
| 2023-12-19
⋅
Twitter (@embee_research)
⋅
Free Ghidra Tutorials for Beginners Cobalt Strike DarkGate |
| 2023-12-08
⋅
Twitter (@Myrtus0x0)
⋅
Tweet naming the family Unidentified 111 (Latrodectus) |
| 2023-12-08
⋅
Twitter (@embee_research)
⋅
Ghidra Basics - Manual Shellcode Analysis and C2 Extraction Cobalt Strike |
| 2023-12-06
⋅
Twitter (@embee_research)
⋅
Ghidra Basics - Identifying, Decoding and Fixing Encrypted Strings Vidar |
| 2023-12-03
⋅
Twitter (@vxunderground)
⋅
Tweet about ALPHV group compromising Tipalti to pressure its clients. BlackCat BlackCat |
| 2023-12-01
⋅
Twitter (@MsftSecIntel)
⋅
Tweet on Danabot leading to cactus ransomware Cactus DanaBot Storm-1044 |