Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-08-11 ⋅ AdvIntel ⋅ AdvIntel
“BazarCall” Advisory: Essential Guide to Attack Vector that Revolutionized Data Breaches
2022-08-10 ⋅ Avast Decoded ⋅ Threat Research Team
Avast Q2/2022 Threat Report: Farewell to Conti, Zloader, and Maldocs; Hello Resurrection of Raccoon Stealer, and more Ransomware Attacks
Conti Raccoon RecordBreaker Zloader Caramel Tsunami
2022-08-10 ⋅ ⋅ Cert-UA ⋅ Cert-UA
Cyberattacks of the UAC-0010 group (Armageddon): malicious programs GammaLoad, GammaSteel (CERT-UA#5134)
Gamaredon Group
2022-08-10 ⋅ Cisco ⋅ Nick Biasini
Cisco Talos shares insights related to recent cyber attack on Cisco
Yanluowang UNC2447
2022-08-10 ⋅ BitSight ⋅ João Batista
Emotet SMB Spreader is Back
Emotet
2022-08-09 ⋅ Twitter (@Katechondic) ⋅ Katechondic
Tweet on malware, suspected to be from China based actor, targeting Taiwan
PUBLOAD
2022-08-09 ⋅ cyble ⋅ Cyble Research Labs
Bitter APT Group Using “Dracarys” Android Spyware
Dracarys
2022-08-09 ⋅ Kaspersky ⋅ Kurt Baumgartner, Seongsu Park
Andariel deploys DTrack and Maui ransomware
Dtrack Maui Ransomware
2022-08-09 ⋅ Zscaler ⋅ Jagadeeswar Ramanukolanu, Sudeep Singh
AiTM phishing attack targeting enterprise users of Gmail
2022-08-08 ⋅ AccidentalRebel ⋅ Karlo Licudine
Malware sandbox evasion in x64 assembly by checking ram size - Part 1
2022-08-08 ⋅ Kaspersky ⋅ Kaspersky Lab ICS CERT
Targeted attack on industrial enterprises and public institutions
Cotx RAT Logtu nccTrojan PortDoor
2022-08-08 ⋅ N1ght-W0lf Blog ⋅ Abdallah Elshinbary
YARA for config extraction
RedLine Stealer
2022-08-07 ⋅ Malverse ⋅ greenplan
Config Extractor per DanaBot (PARTE 1)
DanaBot
2022-08-06 ⋅ MalwareBookReports ⋅ muzi
A LOOK BACK AT BAZARLOADER’S DGA
BazarBackdoor
2022-08-05 ⋅ ⋅ 360 netlab ⋅ Daji, suqitian
The DGA family Orchard continues to change, and the new version generates DGA domain names using Bitcoin transaction information
Orchard
2022-08-05 ⋅ 360 netlab ⋅ 360 Netlab
A new botnet Orchard Generates DGA Domains with Bitcoin Transaction Information
Orchard
2022-08-04 ⋅ Mandiant ⋅ Alice Revelli, Ben Read, Emiel Haeghebaert, Luke Jenkins
ROADSWEEP Ransomware - Likely Iranian Threat Actor Conducts Politically Motivated Disruptive Activity Against Albanian Government Organizations
ROADSWEEP
2022-08-04 ⋅ Cisco Talos ⋅ Arnaud Zobec, Azim Khodjibaev, Edmund Brumaghin, Matt Thaxton
Attackers leveraging Dark Utilities "C2aaS" platform in malware campaigns
2022-08-04 ⋅ Blackberry ⋅ BlackBerry Research & Intelligence Team
North Korean H0lyGh0st Ransomware Has Ties to Global Geopolitics
SiennaBlue SiennaPurple Storm-0530
2022-08-04 ⋅ PTSecurity ⋅ PT Expert Security Center
Flying in the clouds: APT31 renews its attacks on Russian companies through cloud storage
Stealer0x3401 YaRAT