Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2023-11-01 ⋅ Twitter (@embee_research) ⋅ Embee_research
Malware Unpacking With Memory Dumps - Intermediate Methods (Pe-Sieve, Process Hacker, Hxd and Pe-bear)
AsyncRAT
2023-11-01 ⋅ Deep instinct ⋅ Deep Instinct Threat Lab, Simon Kenin
MuddyWater eN-Able spear-phishing with new TTPs
PhonyC2
2023-11-01 ⋅ AppGate ⋅ Felipe Tarijon
Vietnamese Information Stealer Campaigns Target Professionals on LinkedIn
DUCKTAIL
2023-11-01 ⋅ Netskope ⋅ Leandro Froes
New DarkGate Variant Uses a New Loading Approach
DarkGate
2023-10-31 ⋅ Palo Alto Networks Unit 42 ⋅ Daniel Frank, Tom Fakterman
Over the Kazuar’s Nest: Cracking Down on a Freshly Hatched Backdoor Used by Pensive Ursa (Aka Turla)
Kazuar
2023-10-31 ⋅ Elastic ⋅ Andrew Pease, Colson Wilhoit, Ricardo Ungureanu, Seth Goodwin
Elastic catches DPRK passing out KANDYKORN
HLOADER KANDYKORN SUGARLOADER
2023-10-31 ⋅ Infoblox ⋅ Infoblox Threat Intelligence Group
Prolific Puma: Shadowy Link Shortening Service Enables Cybercrime
Prolific Puma
2023-10-31 ⋅ Cloudsek ⋅ Anirudh Batra
Phishing in the Oasis: Investigating the 2 year real estate data harvesting campaign targeting the Middle East
2023-10-30 ⋅ eSentire ⋅ eSentire
Nitrogen Campaign 2.0: Reloads with Enhanced Capabilities Leading to ALPHV/BlackCat Ransomware
BlackCat Nitrogen Loader
2023-10-30 ⋅ Checkpoint ⋅ Checkpoint Research
30TH OCTOBER – THREAT INTELLIGENCE REPORT
SingularityMD
2023-10-27 ⋅ Twitter (@embee_research) ⋅ Embee_research
Remcos Downloader Analysis - Manual Deobfuscation of Visual Basic and Powershell
Remcos
2023-10-27 ⋅ DataBreaches.net ⋅ Dissent
Hackers escalate: leak 200k CCSD students’ data; claim to still have access to CCSD email system
SingularityMD
2023-10-27 ⋅ acsense ⋅ Brendon Rod
A Guide to Scattered Spider Data Breaches
POORTRY
2023-10-26 ⋅ Medium walmartglobaltech ⋅ Jonathan Mccay
SmartApeSG
SmartApeSG NetSupportManager RAT
2023-10-26 ⋅ Fourcore ⋅ parth gol
Threat Hunting: Detecting Browser Credential Stealing [T1555.003]
LaZagne RedLine Stealer
2023-10-26 ⋅ Kaspersky Labs ⋅ Boris Larin, Georgy Kucherin, Igor Kuznetsov, Leonid Bezvershenko, Valentin Pashkov
How to catch a wild triangle
TriangleDB Operation Triangulation
2023-10-26 ⋅ ⋅ ANSSI ⋅ ANSSI
Attack Campaigns of APT28 since 2021
CredoMap DriveOcean Empire Downloader Graphite MimiKatz Mocky LNK reGeorg
2023-10-26 ⋅ Avast Decoded ⋅ Threat Research Team
Rhysida Ransomware Technical Analysis
Rhysida
2023-10-25 ⋅ Microsoft ⋅ Microsoft Incident Response, Microsoft Threat Intelligence
Octo Tempest crosses boundaries to facilitate extortion, encryption, and destruction
BlackCat BlackCat Lumma Stealer
2023-10-25 ⋅ Viuleeenz ⋅ Alessandro Strino
Vidar - payload inspection with static analysis
Vidar