Click here to download all references as Bib-File.•
| 2025-12-18
⋅
Acronis
⋅
Acronis TRU Alliance {Hunt.io}: Hunting DPRK threats - New Global Lazarus & Kimsuky campaigns BADCALL POOLRAT Quasar RAT |
| 2025-12-18
⋅
Gen Digital Inc
⋅
Gen Blogs | Defeating AuraStealer: Practical Deobfuscation Workflows for Modern Infostealers Aura Stealer |
| 2025-12-18
⋅
safebreach
⋅
Prince of Persia: A decade of Iranian Nation State APT Campaign Activity Infy Tonnerre |
| 2025-12-18
⋅
ESET Research
⋅
LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan NosyDownloader |
| 2025-12-18
⋅
Cyderes
⋅
From Loader to Looter: ACR Stealer Rides on Upgraded CountLoader ACR Stealer CountLoader |
| 2025-12-18
⋅
BlackPoint
⋅
New MintsLoader Variant Using Hashtable Obfuscation MintsLoader |
| 2025-12-17
⋅
Reporters Without Borders
⋅
ResidentBat: A new spyware family used by Belarusian KGB ResidentBat |
| 2025-12-17
⋅
Recorded Future
⋅
PurpleBravo’s Targeting of the IT Software Supply Chain BeaverTail InvisibleFerret PylangGhost GolangGhost |
| 2025-12-17
⋅
Cisco Talos
⋅
UAT-9686 actively targets Cisco Secure Email Gateway and Secure Email and Web Manager UAT-9686 |
| 2025-12-17
⋅
Crystal Intelligence
⋅
How we proved North Korea’s blockchain malware campaign JADESNOW |
| 2025-12-17
⋅
XLab
⋅
Kimwolf Exposed: The Massive Android Botnet with 1.8 Million Infected Devices Kimwolf Aisuru |
| 2025-12-17
⋅
Recorded Future
⋅
BlueDelta’s Persistent Campaign Against UKR.NET |
| 2025-12-16
⋅
Zscaler
⋅
BlindEagle Targets Colombian Government Agency with Caminho and DCRAT DCRat PhantomVAI |
| 2025-12-16
⋅
R3dy's Blog
⋅
Gozi Gozi Gozi - String Decryption Gozi ISFB |
| 2025-12-16
⋅
sysdig
⋅
EtherRAT dissected: How a React2Shell implant delivers 5 payloads through blockchain C2 EtherRAT |
| 2025-12-15
⋅
Rapid7
⋅
SantaStealer is Coming to Town: A New, Ambitious Infostealer Advertised on Underground Forums SantaStealer |
| 2025-12-15
⋅
Squiblydoo
⋅
SolarMarker: Actions-On-Target solarmarker |
| 2025-12-15
⋅
StrikeReady
⋅
Russian APT actor phishes the Baltics and the Balkans |
| 2025-12-15
⋅
Amazon
⋅
Amazon Threat Intelligence identifies Russian cyber threat group targeting Western critical infrastructure |
| 2025-12-15
⋅
Bleeping Computer
⋅
French Interior Ministry confirms cyberattack on email servers |