Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2024-08-29 ⋅ Proofpoint ⋅ Pim Trouerbach, Selena Larson, Tommy Madjar
The Malware That Must Not Be Named: Suspected Espionage Campaign Delivers “Voldemort”
Voldemort
2024-08-22 ⋅ Mandiant ⋅ Aaron Lee, Praveeth DSouza
PEAKLIGHT: Decoding the Stealthy Memory-Only Malware
Emmenhtal
2024-08-19 ⋅ Aquasec ⋅ Assaf Morag
PG_MEM: A Malware Hidden in the Postgres Processes
XMRIG
2024-08-14 ⋅ Aquasec ⋅ Assaf Morag
Gafgyt Malware Variant Exploits GPU Power and Cloud Native Environments
Bashlite
2024-06-10 ⋅ The Hacker News ⋅ Ravie Lakshmanan
More_eggs Malware Disguised as Resumes Targets Recruiters in Phishing Attack
More_eggs
2024-06-05 ⋅ Qurakslab ⋅ Fabrice Rossi, Florian Yger, Riccardo Mori, Robin David, Roxane Cohen
QBinDiff: A modular differ to enhance binary diffing and graph alignment (Slides)
2024-06-05 ⋅ ⋅ QuarksLab ⋅ Fabrice Rossi, Florian Yger, Riccardo Mori, Robin David, Roxane Cohen
QBinDiff: A modular differ to enhance binary diffing and graph alignment (Video)
2024-05-22 ⋅ Kaspersky Labs ⋅ GReAT
Stealers, stealers and more stealers
2024-04-24 ⋅ NCSC UK ⋅ NCSC UK
Line Dancer - In-memory shellcode loader targeting Cisco Adaptive Security Appliance (ASA) devices.
2024-04-15 ⋅ Positive Technologies ⋅ Aleksandr Badaev, Kseniya Naumova
SteganoAmor campaign: TA558 mass-attacking companies and public institutions all around the world
LokiBot 404 Keylogger Agent Tesla CloudEyE Formbook Remcos XWorm
2024-02-05 ⋅ Reuters ⋅ Michael Perry, Neil Jerome Morales
Philippines wards off cyber attacks from China-based hackers
2024-01-18 ⋅ M4lcode, Mostafa Farghaly
Detect Mortis Locker Ransomware with YARA
Mortis
2024-01-18 ⋅ Morphisec ⋅ Arnold Osipov
Chae$ Chronicles: Version 4.1 Dedicated to Morphisec Researchers
Chaes
2024-01-18 ⋅ Morphisec ⋅ Arnold Osipov
Chae$ Chronicles: Version 4.1 Dedicated to Morphisec Researchers
Chaes
2024-01-10 ⋅ Volexity ⋅ Matthew Meltzer, Robert Jan Mora, Sean Koessel, Steven Adair, Thomas Lancaster
Active Exploitation of Two Zero-Day Vulnerabilities in Ivanti Connect Secure VPN
UTA0178
2023-12-21 ⋅ Martin Clauß, Valentin Obst
BPF Memory Forensics with Volatility 3
BPFDoor TripleCross
2023-11-01 ⋅ Twitter (@embee_research) ⋅ Embee_research
Malware Unpacking With Memory Dumps - Intermediate Methods (Pe-Sieve, Process Hacker, Hxd and Pe-bear)
AsyncRAT
2023-10-18 ⋅ Google ⋅ Kate Morgan
Government-backed actors exploiting WinRAR vulnerability
APT40
2023-10-03 ⋅ Luca Mella
Lighting the Exfiltration Infrastructure of a LockBit Affiliate (and more)
LockBit LockBit Conti LockBit
2023-10-01 ⋅ r-tec ⋅ Sven Rath
.NET Assembly Obfuscation for Memory Scanner Evasion