Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2023-07-05 ⋅ Qianxin ⋅ Red Raindrop Team
Patchwork Group Utilizing WarHawk Backdoor Variant "Spyder" for Espionage against Multiple Countries
Spyder Patchwork
2023-07-05 ⋅ The Record ⋅ Daryna Antoniuk
Belarusian hacktivists сlaim to breach country’s leading state university
Cyber Partisans
2023-07-04 ⋅ Qianxin Threat Intelligence Center ⋅ Threat Intelligence Center
Suspected Maha Grass Organization Uses WarHawk Backdoor Variant Spyder to Spy on Multiple Countries
Spyder Patchwork WarHawk
2023-07-04 ⋅ The Record ⋅ Jonathan Greig
Fort Worth officials say leaked data came from Public Information Act request
SiegedSec
2023-07-03 ⋅ Check Point Research ⋅ Checkpoint Research
Chinese Threat Actors Targeting Europe in SmugX Campaign
DOPLUGS SmugX
2023-07-03 ⋅ AhnLab ⋅ ASEC
Crysis Threat Actor Installing Venus Ransomware Through RDP
Dharma
2023-06-30 ⋅ Mandiant ⋅ Mandiant
Barracuda ESG: CVE-2023-2868 Hardening Recommendations
UNC4841
2023-06-30 ⋅ Twitter (@rivitna2) ⋅ @rivitna2
Twitter thread about relationship between 8Base and Phobos ransomware
8Base Phobos
2023-06-29 ⋅ MalwareBookReports ⋅ muzi
GuLoader: Navigating a Maze of Intricacy
CloudEyE
2023-06-29 ⋅ SentinelOne ⋅ Alex Delamotte, Jim Walter
Rhysida Ransomware | RaaS Crawls Out of Crimeware Undergrowth to Attack Chilean Army
Rhysida
2023-06-29 ⋅ Avast Decoded ⋅ Threat Research Team
Decrypted: Akira Ransomware
Akira
2023-06-29 ⋅ DeepInstinct ⋅ Deep Instinct Threat Lab, Simon Kenin
PhonyC2: Revealing a New Malicious Command & Control Framework by MuddyWater
PhonyC2 POWERSTATS
2023-06-28 ⋅ BI. ZONE Cyber Threats Research Team ⋅ Oleg Skulkin
Red Wolf is back to spy on commercial firms Red Wolf is back to spy on commercial firms
RedCurl
2023-06-28 ⋅ vmware ⋅ Bria Beathley, Dana Behling, Deborah Snyder, Fae Carlisle
8Base Ransomware: A Heavy Hitting Player
8Base Phobos SmokeLoader SystemBC
2023-06-28 ⋅ Mandiant ⋅ Alexander Marvi, Greg Blaum, Ron Craft
Detection, Containment, and Hardening Opportunities for Privileged Guest Operations, Anomalous Behavior, and VMCI Backdoors on Compromised VMware Hosts
UNC3886
2023-06-28 ⋅ ⋅ AhnLab ⋅ Sanseo
Kimsuky Attack Group Abusing Chrome Remote Desktop
Appleseed
2023-06-28 ⋅ Kaspersky Labs ⋅ GReAT
Andariel’s silly mistakes and a new malware family
Jupiter
2023-06-28 ⋅ Volexity ⋅ Ankur Saini, Charlie Gardner
Charming Kitten Updates POWERSTAR with an InterPlanetary Twist
POWERSTAR
2023-06-27 ⋅ Viuleeenz ⋅ Alessandro Strino
IDA-Python - Locate a function independently from its offset
2023-06-26 ⋅ Github (cocomelonc) ⋅ cocomelonc
Malware AV/VM evasion - part 18: encrypt/decrypt payload via modular multiplication-based block cipher. Simple C++ example.