Click here to download all references as Bib-File.

Enter keywords to filter the library entries below or Propose new Entry
2020-10-03Trend MicroCedric Pernet, Daniel Lunghi, Jaromír Hořejší, Kazuki Fujisawa
Earth Akhlut: Exploring the Tools, Tactics, and Procedures of an Advanced Threat Actor Operating a Large Infrastructure
Dexbia TypeHash
2020-09-25VISAVisa Security Alert
Visa Security Alert: New Malware Samples identified in Point-of-Sale Compromises
BlackPOS pwnpos rtpos
2020-09-11KISAKrCERT
Analysis of attacker's strategy of using malicious code
2020-08-27fmnagisa wordpressFacundo M
Revisiting EquationGroup’s FANNY… or is it DEMENTIAWHEEL?
DoubleFantasy Fanny
2020-08-26CISACISA, FBI, U.S. Cyber Command, U.S. Department of the Treasury
Alert (AA20-239A): FASTCash 2.0: North Korea's BeagleBoyz Robbing Banks
FastCash
2020-08-26CISACISA
MAR-10301706-1.v1 - North Korean Remote Access Tool: ECCENTRICBANDWAGON
PSLogger
2020-08-26CISACISA
MAR-10301706-2.v1 - North Korean Remote Access Tool: VIVACIOUSGIFT
NACHOCHEESE
2020-08-19CISACISA
MAR-10295134-1.v1 - North Korean Remote Access Trojan: BLINDINGCAN
BLINDINGCAN
2020-08-03US-CERTCISA, US-CERT
MAR-10292089-1.v1 – Chinese Remote Access Trojan: TAIDOOR
taidoor
2020-08-01VISAVisa Security Alert
‘Baka’ JavaScript Skimmer Identified
2020-07-27CISACISA, NCSC UK
Alert (AA20-209A): Potential Legacy Risk from Malware Targeting QNAP NAS Devices
QSnatch
2020-07-27NCSC UKCISA, NCSC UK
Alert: Potential legacy risk from malware targeting QNAP NAS devices
QSnatch
2020-07-16CISAUS-CERT
Malware Analysis Report (AR20-198C)
WellMail
2020-07-16CISAUS-CERT
Malware Analysis Report (AR20-198A)
SoreFang
2020-07-16CISAUS-CERT
Malware Analysis Report (AR20-198B)
WellMess
2020-06-29KISAKrCERT
OPERATION BOOKCODES TTPs #2
BookCodes RAT
2020-06-11ZscalerAtinderpal Singh, Sudeep Singh
The Return of the Higaisa APT
Unidentified 076 (Higaisa LNK to Shellcode)
2020-06-04PTSecurityPT ESC Threat Intelligence
COVID-19 and New Year greetings: an investigation into the tools and methods used by the Higaisa group
Ghost RAT SongXY
2020-06-04Sophos Naked SecurityLisa Vaas
Nuclear missile contractor hacked in Maze ransomware attack
Maze
2020-06-03MalwarebytesHossein Jazi, Jérôme Segura
New LNK attack tied to Higaisa APT discovered
Higaisa