Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2024-03-18 ⋅ ThreatMon ⋅ Kerime Gencay
Planet Stealer Malware Analysis Report (Paywall)
2024-03-06 ⋅ Trend Micro ⋅ Mohamed Fahmy
Unveiling Earth Kapre aka RedCurl's Cyberespionage Tactics With Trend Micro MDR, Threat Intelligence
RedCurl Earth Kapre
2024-03-01 ⋅ Ryan Weil ⋅ Ryan Weil
Agent Tesla Analysis [Part 2: Deobfuscation]
Agent Tesla
2024-02-28 ⋅ Security Intelligence ⋅ Golo Mühr, Ole Villadsen
X-Force data reveals top spam trends, campaigns and senior superlatives in 2023
404 Keylogger Agent Tesla Black Basta DarkGate Formbook IcedID Loki Password Stealer (PWS) Pikabot QakBot Remcos
2024-02-27 ⋅ Doubleagent.net ⋅ haxrob
GTPDOOR - A novel backdoor tailored for covert access over the roaming exchange
GTPDOOR
2024-02-20 ⋅ National Crime Agency ⋅ National Crime Agency (NCA)
International investigation disrupts the world’s most harmful cyber crime group
LockBit LockBit LockBit
2024-02-19 ⋅ AhnLab ⋅ AhnLab SEcurity intelligence Center
Analysis of Nood RAT Used in Attacks Against Linux (Gh0st RAT’s Variant)
Nood RAT
2024-02-16 ⋅ Medium b.magnezi ⋅ 0xMrMagnezi
Malware Analysis — AgentTesla
Agent Tesla
2024-02-15 ⋅ Cisco Talos ⋅ Arnaud Zobec, Asheer Malhotra, Holger Unterbrink, Vitor Ventura
TinyTurla Next Generation - Turla APT spies on Polish NGOs
TinyTurlaNG
2024-02-15 ⋅ Department of Justice ⋅ Office of Public Affairs
Justice Department Conducts Court-Authorized Disruption of Botnet Controlled by the Russian Federation’s Main Intelligence Directorate of the General Staff (GRU)
MooBot
2024-02-11 ⋅ Microsoft Security Intelligence
Scano
Scano
2024-02-07 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Iran surges cyber-enabled influence operations in support of Hamas
2024-02-06 ⋅ Medium osamaellahi ⋅ Osama Ellahi
Unfolding Agent Tesla: The Art of Credentials Harvesting.
Agent Tesla
2024-02-06 ⋅ Group-IB ⋅ Threat Intelligence
Dead-end job: ResumeLooters gang infects websites with XSS scripts and SQL injections to vacuum up job seekers' personal data and CVs
ResumeLooters
2024-02-01 ⋅ ⋅ Infinitum IT ⋅ Kerime Gencay
DcRat Technical Analysis Report (Paywall)
DCRat
2024-01-25 ⋅ JSAC 2024 ⋅ Masafumi Takeda, Tomoya Furukawa
Threat Intelligence of Abused Public Post-Exploitation Frameworks
AsyncRAT DCRat Empire Downloader GRUNT Havoc Koadic Merlin PoshC2 Quasar RAT Sliver
2024-01-25 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Midnight Blizzard: Guidance for responders on nation-state attack
UNC2452
2024-01-24 ⋅ ITOCHU ⋅ ITOCHU Cyber & Intelligence Inc.
The Endless Struggle Against APT10: Insights from LODEINFO v0.6.6 - v0.7.3 Analysis
LODEINFO
2024-01-22 ⋅ SentinelOne ⋅ Aleksandar Milenkoski, Tom Hegel
ScarCruft | Attackers Gather Strategic Intelligence and Target Cybersecurity Professionals
Kimsuky
2024-01-17 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
New TTPs observed in Mint Sandstorm campaign targeting high-profile individuals at universities and research orgs
MediaPI APT35