Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2020-12-15 ⋅ Github (itsreallynick) ⋅ Nick Carr
A quick note from Nick Carr on COSMICGALE and SUPERNOVA that those are unrelated to UC2452 intrusion campaign
SUPERNOVA
2020-12-15 ⋅ Github (Dump-GUY) ⋅ Jiří Vinopal
Reverse engineering KPOT v2.0 Stealer
KPOT Stealer
2020-12-15 ⋅ Github (sophos-cybersecurity) ⋅ Sophos Cyber Security Team
solarwinds-threathunt
Cobalt Strike SUNBURST
2020-12-13 ⋅ Github (fireeye) ⋅ FireEye
SUNBURST Countermeasures
SUNBURST SUPERNOVA TEARDROP UNC2452
2020-12-12 ⋅ Github (cdong1012) ⋅ Chuong Dong
ContiUnpacker: An automatic unpacker for Conti rasnomware
Conti
2020-12-09 ⋅ Github (fireeye) ⋅ FireEye
Fireeye RED TEAM tool countermeasures
2020-11-09 ⋅ Trend Micro ⋅ Zhengyu Dong
An Old Joker’s New Tricks: Using Github To Hide Its Payload
Joker
2020-11-07 ⋅ Github (guitmz) ⋅ Guilherme Thomazi Bonicontro
Linux.Midrashim
Midrashim
2020-11-05 ⋅ Github (scythe-io) ⋅ SCYTHE
Ryuk Adversary Emulation Plan
Ryuk
2020-11-05 ⋅ Juniper ⋅ Alex Burt, Trevor Pott
Gitpaste-12: a new worming botnet with reverse shell capability spreading via GitHub and Pastebin
Gitpaste-12
2020-10-30 ⋅ Github (ThreatConnect-Inc) ⋅ ThreatConnect
UNC 1878 Indicators from Threatconnect
BazarBackdoor Cobalt Strike Ryuk
2020-10-29 ⋅ Github (Swisscom) ⋅ Swisscom CSIRT
List of CobaltStrike C2's used by RYUK
Cobalt Strike
2020-10-28 ⋅ Github (aaronst) ⋅ Aaron Stephens
UNC1878 indicators
Ryuk UNC1878
2020-10-11 ⋅ Github (StrangerealIntel) ⋅ StrangerealIntel
Chimera, APT19 under the radar ?
Cobalt Strike Meterpreter
2020-10-07 ⋅ Github (brompwnie) ⋅ Chris Le Roy
Break out the Box (BOtB)
Break out the Box
2020-10-01 ⋅ Github (eset) ⋅ Matthieu Faou
XDSpy Indicators of Compromise
XDSpy XDSpy
2020-09-29 ⋅ Github (Apr4h) ⋅ Apra
CobaltStrikeScan
Cobalt Strike
2020-09-25 ⋅ Github (sisoma2) ⋅ Marc
Turla Carbon System
Cobra Carbon System
2020-09-24 ⋅ Github (FortyNorthSecurity) ⋅ Joe Leon, Matt Grandy
Offensive Maldocs in 2020
2020-09-18 ⋅ Github (gdbinit) ⋅ Pedro Vilaça
EvilQuest/ThiefQuest strings decrypt/deobfuscator
EvilQuest