Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2020-06-17 ⋅ Twitter (@VK_intel) ⋅ malwrhunterteam, Vitali Kremez
Tweet on signed Tinymet payload (V.02) used by TA505
TinyMet
2020-06-11 ⋅ Twitter (@bad_packets) ⋅ Bad Packets Report
Tweet on Honda & Enel Critix(NetScaler) VPN server vulnerable to CVE-2019-19781, possibly targeted by SNAKE ransomware
Snake
2020-06-10 ⋅ James_inthe_box, jeFF0Falltrades, _re_fox
FRat Reporting, YARA, and IoCs
FRat Loader FRat
2020-06-09 ⋅ Lab52 ⋅ Lab52
Recent FK_Undead rootkit samples found in the wild
2020-06-08 ⋅ Stratosphere Lab ⋅ Twitter (@_lubiedo)
Dark Nexus: the old, the new and the ugly
Dark Nexus
2020-06-07 ⋅ Zero2Automated Blog ⋅ 0verfl0w_
Dealing with Obfuscated Macros, Statically - NanoCore
Nanocore RAT
2020-05-28 ⋅ Twitter (@Andrew___Morris) ⋅ Andrew Morris
Tweet on Sandworm threat actor exploiting CVE-2019-10149
2020-05-25 ⋅ Twitter (@JAMESWT_MHT) ⋅ JamesWT
Tweet on FuckUnicorn instance of HiddenTear
HiddenTear
2020-05-14 ⋅ Leonardo ⋅ Leonardo’s Cyber Security division
Malware Technical Insight Turla "Penquin_x64"
Penquin Turla
2020-05-12 ⋅ Twitter (@James_inthe_box) ⋅ James_inthe_box
Tweet on Himera Loader
Himera Loader
2020-05-07 ⋅ Red Canary ⋅ Jesse Brown
Detecting COR_PROFILER manipulation for persistence
2020-05-05 ⋅ Github (StrangerealIntel) ⋅ @Arkbird_SOLG
Operation Flash Cobra
2020-05-04 ⋅ Twitter (@VK_intel) ⋅ Vitali Kremez
GuLoader API Loader Algorithm
CloudEyE
2020-04-29 ⋅ Twitter (@VK_intel) ⋅ Vitali Kremez
Some Insight into GuLoader family
CloudEyE
2020-04-21 ⋅ Twitter (@VK_intel) ⋅ Vitali Kremez
Tweet on Signed GuLoader
CloudEyE
2020-03-11 ⋅ Twitter (@casual_malware) ⋅ casual_malware
Tweet on FireBird RAT
FireBird RAT
2020-03-09 ⋅ Malpedia
py.unidentified_003
unidentified_003
2020-03-09 ⋅ Malpedia
py.unidentified_002
unidentified_002
2020-03-09 ⋅ Malpedia
py.unidentified_001
2020-03-05 ⋅ JPCERT/CC ⋅ Shusei Tomonaga
ELF_TSCookie - Linux Malware Used by BlackTech
TSCookie