Click here to download all references as Bib-File.•
| 2023-10-11
⋅
Microsoft
⋅
Automatic disruption of human-operated attacks through containment of compromised user accounts Akira Akira |
| 2023-10-11
⋅
Twitter (@MsftSecIntel)
⋅
Tweet on Storm-0062 exploiting CVE-2023-22515 Storm-0062 |
| 2023-10-10
⋅
Qianxin
⋅
Sand Cat Group - Attacks on Kurdistan Democratic Party (KDP) Activists MOrder RAT Caracal Kitten |
| 2023-10-10
⋅
cyble
⋅
Threat Actor deploys Mythic’s Athena Agent to target Russian Semiconductor Suppliers Athena |
| 2023-10-10
⋅
Symantec
⋅
Grayling: Previously Unseen Threat Actor Targets Multiple Organizations in Taiwan Cobalt Strike Havoc MimiKatz Grayling |
| 2023-10-06
⋅
ITOCHU
⋅
Sequel: Gifts from Tropical Pirates - Who is the Sender? Look for the Attacker Group EntryShell SparrowDoor |
| 2023-10-06
⋅
CYBERWARZONE
⋅
Hacking Group ‘Cyber Av3ngers’ Claims Responsibility for Yavne Power Outages: What You Need to Know Cyber Av3ngers |
| 2023-10-05
⋅
Securonix
⋅
Securonix Threat Labs Monthly Intelligence Insights – September 2023 UAC-0154 |
| 2023-10-05
⋅
ESET Research
⋅
Operation Jacana: Foundling hobbits in Guyana DinodasRAT |
| 2023-10-05
⋅
Group-IB
⋅
Let's dig deeper: dissecting the new Android Trojan GoldDigger with Group-IB Fraud Matrix GoldDigger |
| 2023-10-05
⋅
EclecticIQ
⋅
Chinese State-Sponsored Cyber Espionage Activity Targeting Semiconductor Industry in East Asia ChargeWeapon Carderbee |
| 2023-10-05
⋅
Talos
⋅
Qakbot-affiliated actors distribute Ransom Knight malware despite infrastructure takedown QakBot |
| 2023-10-05
⋅
Twitter (@embee_research)
⋅
Introduction to DotNet Configuration Extraction - RevengeRAT Revenge RAT |
| 2023-10-04
⋅
Trend Micro
⋅
Possible supply chain attack targeting Pakistan government delivers ShadowPad ShadowPad |
| 2023-10-04
⋅
Trend Micro
⋅
Possible supply chain attack targeting Pakistan government delivers Shadowpad (Slides) ShadowPad |
| 2023-10-04
⋅
Twitter (@embee_research)
⋅
Developing Yara Signatures for Malware - Practical Examples DarkGate Lu0Bot |
| 2023-10-03
⋅
The Record
⋅
NATO 'actively addressing' alleged cyberattack affecting some websites SiegedSec |
| 2023-10-03
⋅
Twitter (@ShilpeshTrivedi)
⋅
Tweet about possible Rebranding/Deriviate for ERMAC called Rusty Droid ERMAC |
| 2023-10-03
⋅
Outpost24
⋅
Rhadamanthys malware analysis: How infostealers use VMs to avoid analysis Rhadamanthys |
| 2023-10-03
⋅
Lighting the Exfiltration Infrastructure of a LockBit Affiliate (and more) LockBit LockBit Conti LockBit |