Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-03-10 ⋅ Twitter (@Katechondic) ⋅ Katechondic
Tweet on additional computer names "desktop-g1i8n3f" & "desktop-j6llo2k", seen with Crimson RAT C2 infrastructure used by APT36
Crimson RAT
2022-03-10 ⋅ Twitter (@teamcymru_S2) ⋅ Team Cymru
Tweet on Crimson RAT infrastructure used by APT36
Crimson RAT
2022-03-09 ⋅ Twitter (@struppigel) ⋅ Karsten Hahn
Tweets detailing NominatusToxicBattery
NominatusToxicBattery
2022-03-09 ⋅ Twitter (@silascutler) ⋅ Silas Cutler
Tweet on HermeticWizard's self-spreading mechanism
HermeticWizard
2022-03-08 ⋅ Twitter (@CyberJack42) ⋅ CyberJack
Tweet on ELFSHELF alias for KEYPLUG
KEYPLUG
2022-03-08 ⋅ Twitter (@ShaneHuntley) ⋅ Google Threat Analysis Group, Shane Huntley
Tweet on APT31 phishing campaign targeting high profile Gmail users affiliated with the U.S. government in February
2022-03-08 ⋅ Twitter (@struppigel) ⋅ Karsten Hahn
Tweet on KazyLoader
KazyLoader
2022-03-01 ⋅ Twitter (@TheDFIRReport) ⋅ The DFIR Report
Twitter thread with highlights from conti leaks
Conti
2022-03-01 ⋅ Twitter (@ContiLeaks) ⋅ ContiLeaks
Tweet on Emotet final server scheme
Emotet
2022-02-28 ⋅ Twitter (@struppigel) ⋅ Karsten Hahn
Tweet on Gofing discovery
Gofing
2022-02-28 ⋅ Twitter (@M_haggis) ⋅ The Haag
Tweet on parsing Daxin driver metadata using powershell
Daxin
2022-02-25 ⋅ Twitter (@fr0gger) ⋅ Thomas Roccia
Tweets with an overview of HermeticWiper
HermeticWiper
2022-02-23 ⋅ Twitter (@threatintel) ⋅ Symantec Threat Intelligence
Tweet on new wiper malware being used in attacks on Ukraine
HermeticWiper
2022-02-17 ⋅ Twitter (@Honeymoon_IoC) ⋅ Gi7w0rm
Tweets on win.prometei caught via Cowrie
Prometei
2022-02-03 ⋅ Gdata ⋅ Karsten Hahn
QR codes on Twitter deliver malicious Chrome extension
Choziosi
2022-01-24 ⋅ Twitter (@_icebre4ker_) ⋅ _icebre4ker_
Vultur Dropper on Google Play Store
Vultur
2022-01-21 ⋅ Twitter (@_CPResearch_) ⋅ Check Point Research
Tweet on WhiteLambert malware
Lambert
2022-01-20 ⋅ Twitter (@ClearskySec) ⋅ ClearSky Cybersecurity
Tweet on ComLook backdoor used by Turla
ComLook
2022-01-20 ⋅ Twitter (@nunohaien) ⋅ Tillmann Werner
Tweet on key points of Whispergate wiper
WhisperGate
2022-01-18 ⋅ Twitter (@knight0x07) ⋅ neeraj
Thread on yet another comprehensive analysis of WHISPERGATE
WhisperGate