Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-10-12 ⋅ Netresec ⋅ Erik Hjelmvik
IcedID BackConnect Protocol
IcedID
2022-10-11 ⋅ Medium (@DCSO_CyTec) ⋅ Axel Wauer, Denis Szadkowski, Johann Aydinbas
Tracking down Maggie
Maggie
2022-10-11 ⋅ BleepingComputer ⋅ Bill Toulas
Hacking group POLONIUM uses ‘Creepy’ malware against Israel
DeepCreep MegaCreep Unidentified 097 (Polonium Keylogger)
2022-10-09 ⋅ DataBreaches.net ⋅ Dissent
Johnson Fitness and Wellness hit by DESORDEN Group
Desorden Group
2022-10-07 ⋅ ISC ⋅ Xavier Mertens
Powershell Backdoor with DGA Capability
FTCODE
2022-10-07 ⋅ Checkmarx ⋅ Aviad Gershon, Dor Tumarkin, Jossef Harush, Raphael Silva, Roman Chikunov, Tal Folkman, Yehuda Gelb
LofyGang – Software Supply Chain Attackers; Organized, Persistent, and Operating for Over a Year
LofyGang
2022-10-07 ⋅ YouTube (BSides Portland) ⋅ Pim Trouerbach
SmokeLoader - The Pandora's box of Tricks
SmokeLoader
2022-10-07 ⋅ Team Cymru ⋅ S2 Research Team
A Visualizza into Recent IcedID Campaigns: Reconstructing Threat Actor Metrics with Pure Signal™ Recon
IcedID PhotoLoader
2022-10-06 ⋅ Aon ⋅ Andre Maccarone, Chapin Bryce, John Ailes
Amazon Web Services: Exploring The Cost Of Exfil
2022-10-06 ⋅ Trellix ⋅ Daksh Kapur
Evolution of BazarCall Social Engineering Tactics
BazarBackdoor BazarCall
2022-10-06 ⋅ Blackberry ⋅ The BlackBerry Research & Intelligence Team
Mustang Panda Abuses Legitimate Apps to Target Myanmar Based Victims
PlugX
2022-10-06 ⋅ CISA ⋅ FBI, NSA, US-CERT
Alert (AA22-279A) Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors
2022-10-05 ⋅ Microsoft ⋅ Microsoft Security Threat Intelligence
Detecting and preventing LSASS credential dumping attacks
2022-10-04 ⋅ cocomelonc ⋅ cocomelonc
Malware development: persistence - part 13. Hijacking uninstall logic for application. Simple C++ example.
2022-10-04 ⋅ Rewterz Information Security ⋅ Rewterz Information Security
Rewterz Threat Alert – KONNI APT Group – Active IOCs
Konni Opal Sleet
2022-10-04 ⋅ Sophos ⋅ Andreas Klopsch
Remove All The Callbacks – BlackByte Ransomware Disables EDR Via RTCore64.sys Abuse
BlackByte
2022-10-04 ⋅ CISA ⋅ US-CERT
Alert (AA22-277A) Impacket and Exfiltration Tool Used to Steal Sensitive Information from Defense Industrial Base Organization
2022-10-03 ⋅ Kaspersky Labs ⋅ GReAT
DeftTorero: tactics, techniques and procedures of intrusions revealed
Nightrunner Tunna ASPXSpy LaZagne ExplosiveRAT reGeorg Volatile Cedar
2022-10-03 ⋅ Check Point ⋅ Marc Salinas Fernandez
Bumblebee: increasing its capacity and evolving its TTPs
BumbleBee Cobalt Strike Meterpreter Sliver Vidar
2022-10-02 ⋅ DataBreaches.net ⋅ Dissent
Thailand’s THE ICON GROUP hacked by DESORDEN
Desorden Group