Click here to download all references as Bib-File.•
| 2022-03-17
⋅
Cisco
⋅
From BlackMatter to BlackCat: Analyzing two attacks from one affiliate BlackCat BlackMatter BlackCat BlackMatter |
| 2022-03-16
⋅
Cisco
⋅
Preparing for denial-of-service attacks with Talos Incident Response |
| 2022-03-16
⋅
SANS ISC
⋅
Qakbot infection with Cobalt Strike and VNC activity Cobalt Strike QakBot |
| 2022-03-15
⋅
Cisco
⋅
Threat Advisory: CaddyWiper CaddyWiper |
| 2022-03-15
⋅
ESET Research
⋅
CaddyWiper: New wiper malware discovered in Ukraine CaddyWiper |
| 2022-03-11
⋅
Varonis
⋅
Is this SID taken? Varonis Threat Labs Discovers Synthetic SID Injection Attack |
| 2022-03-10
⋅
SecurityScorecard
⋅
SecurityScorecard Discovers new botnet, ‘Zhadnost,’ responsible for Ukraine DDoS attacks |
| 2022-03-10
⋅
Cisco Talos
⋅
WEDNESDAY, MARCH 9, 2022 Threat advisory: Cybercriminals compromise users with malware disguised as pro-Ukraine cyber tools |
| 2022-03-08
⋅
Team Cymru
⋅
Record breaking DDoS Potential Discovered: CVE-2022-26143 |
| 2022-02-28
⋅
Twitter (@struppigel)
⋅
Tweet on Gofing discovery Gofing |
| 2022-02-24
⋅
Cisco Talos
⋅
Threat Advisory: Cyclops Blink VPNFilter |
| 2022-02-18
⋅
YouTube (John Hammond)
⋅
Uncovering NETWIRE Malware - Discovery & Deobfuscation NetWire RC |
| 2022-02-18
⋅
SANS ISC
⋅
Remcos RAT Delivered Through Double Compressed Archive Remcos |
| 2022-02-13
⋅
The Record
⋅
San Francisco 49ers confirm ransomware attack BlackByte |
| 2022-02-11
⋅
Cisco Talos
⋅
Threat Roundup for February 4 to February 11 DarkComet Ghost RAT Loki Password Stealer (PWS) Tinba Tofsee Zeus |
| 2022-02-11
⋅
blog.rootshell.be
⋅
[SANS ISC] CinaRAT Delivered Through HTML ID Attributes Quasar RAT |
| 2022-02-09
⋅
Cisco
⋅
What’s with the shared VBA code between Transparent Tribe and other threat actors? |
| 2022-02-04
⋅
Bleeping Computer
⋅
News Corp discloses hack from "persistent" nation state cyber attacks |
| 2022-02-02
⋅
Cisco
⋅
Arid Viper APT targets Palestine with new wave of politically themed phishing attacks, malware Micropsia |
| 2022-01-31
⋅
Cisco
⋅
Iranian APT MuddyWater targets Turkish users via malicious PDFs, executables |