Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-03-17 ⋅ Cisco ⋅ Caitlin Huey, Tiago Pereira
From BlackMatter to BlackCat: Analyzing two attacks from one affiliate
BlackCat BlackMatter BlackCat BlackMatter
2022-03-08 ⋅ Twitter (@CyberJack42) ⋅ CyberJack
Tweet on ELFSHELF alias for KEYPLUG
KEYPLUG
2022-03-08 ⋅ Twitter (@ShaneHuntley) ⋅ Google Threat Analysis Group, Shane Huntley
Tweet on APT31 phishing campaign targeting high profile Gmail users affiliated with the U.S. government in February
2022-03-04 ⋅ Mandiant ⋅ James Sadowski, Ryan Hall
Responses to Russia's Invasion of Ukraine Likely to Spur Retaliation
HermeticWiper PartyTicket WhisperGate
2022-03-03 ⋅ Proofpoint ⋅ Proofpoint Cloud Security Research
Cloud Credential Compromise Campaign Originating from Russian-Affiliated Infrastructure
2022-02-25 ⋅ CrowdStrike ⋅ Adrian Liviu Arsene, Farid Hendi, william thomas
CrowdStrike Falcon Protects from New Wiper Malware Used in Ukraine Cyberattacks
HermeticWiper
2022-02-23 ⋅ ZDNet ⋅ Danny Palmer
Security warning: Hackers are using this new malware to target firewall appliances
2022-02-17 ⋅ Trellix ⋅ Christiaan Beek, Marc Elias
Looking over the nation-state actors’ shoulders: Even they have a difficult day sometimes
Empire Downloader
2022-02-16 ⋅ Check Point Research ⋅ Aliaksandr Trafimchuk, Raman Ladutska
A Modern Ninja: Evasive Trickbot Attacks Customers of 60 High-Profile Companies
TrickBot
2022-02-09 ⋅ CISA ⋅ Australian Cyber Security Centre (ACSC), CISA, FBI, NCSC UK, NSA
Alert (AA22-040A) 2021 Trends Show Increased Globalized Threat of Ransomware
2022-02-09 ⋅ Australian Cyber Security Centre (ACSC), CISA, FBI, NSA, United Kingdom’s National Cyber Security Centre (NCSC-UK)
2021 Trends Show Increased Globalized Threat of Ransomware
2022-02-08 ⋅ Bleeping Computer ⋅ Sergiu Gatlan
NetWalker ransomware affiliate sentenced to 80 months in prison
Mailto
2022-01-28 ⋅ Group-IB ⋅ Iaroslav Polianskii, Vesta Matveeva
Shedding light on the dark web
2022-01-25 ⋅ Medium (Cryptax) ⋅ Axelle Apvrille
BianLian C&C domain name
BianLian Hydra
2022-01-25 ⋅ Trellix ⋅ Alexandre Mundo, Christiaan Beek, Leandro Velasco, Marc Elias, Max Kersten
Prime Minister’s Office Compromised: Details of Recent Espionage Campaign
Graphite
2022-01-17 ⋅ Medium (Cryptax) ⋅ Axelle Apvrille
Android/BianLian payload
BianLian Hydra
2022-01-14 ⋅ Medium (Cryptax) ⋅ Axelle Apvrille
Multidex trick to unpack Android/BianLian
BianLian
2021-12-22 ⋅ CISA ⋅ Australian Cyber Security Centre (ACSC), Canadian Centre for Cyber Security (CCCS), CISA, Computer Emergency Response Team New Zealand (CERT NZ), FBI, New Zealand National Cyber Security Centre (NZ NCSC), NSA, United Kingdom’s National Cyber Security Centre (NCSC-UK)
Alert (AA21-356A) Mitigating Log4Shell and Other Log4j-Related Vulnerabilities
2021-12-08 ⋅ Check Point Research ⋅ Aliaksandr Trafimchuk, David Driker, Raman Ladutska, Yali Magiel
When old friends meet again: why Emotet chose Trickbot for rebirth
Emotet TrickBot
2021-11-30 ⋅ Bleeping Computer ⋅ Ionut Ilascu
Yanluowang ransomware operation matures with experienced affiliates
FiveHands