Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2024-08-29 ⋅ Google ⋅ Clement Lecigne, Josh Atkins, Luke Jenkins
State-backed attackers and commercial surveillance vendors repeatedly use the same exploits
ANDROSNATCH Unidentified APK 009 (Chrome Recon) COOKIESNATCH VALIDVICTOR
2024-08-29 ⋅ Proofpoint ⋅ Pim Trouerbach, Selena Larson, Tommy Madjar
The Malware That Must Not Be Named: Suspected Espionage Campaign Delivers “Voldemort”
Voldemort
2024-08-29 ⋅ Netskope ⋅ Leandro Froes
Latrodectus Rapid Evolution Continues With Latest New Payload Features
Latrodectus
2024-08-29 ⋅ Securonix ⋅ Den Iyzvyk, Tim Peck
From Cobalt Strike to Mimikatz: A Deep Dive into the SLOW#TEMPEST Campaign Targeting Chinese Users
Cobalt Strike MimiKatz
2024-08-29 ⋅ Hunt.io ⋅ Hunt.io
Latrodectus Malware Masquerades as AhnLab Security Software to Infect Victims
Latrodectus
2024-08-28 ⋅ Seqrite ⋅ Sathwik Ram Prakki, Subhajeet Singha
Operation Oxidový: Sophisticated Malware Campaign Targets Czech Officials Using NATO-Themed Decoys
Havoc Sliver
2024-08-28 ⋅ Bleeping Computer ⋅ Bill Toulas
PoorTry Windows driver evolves into a full-featured EDR wiper
POORTRY
2024-08-28 ⋅ ESET Research ⋅ Romain Dumont
Analysis of two arbitrary code execution vulnerabilities affecting WPS Office
SpyGrace
2024-08-28 ⋅ ESET Research ⋅ ESET Research
ESET Research: Spy group exploits WPS Office zero day; analysis uncovers a second vulnerability
SpyGrace
2024-08-28 ⋅ Help Net Security ⋅ Help Net Security
APT group exploits WPS Office for Windows RCE vulnerability (CVE-2024-7262)
2024-08-28 ⋅ Talos Intelligence ⋅ Craig Jackson, James Nutland, Terryn Valikodath
BlackByte blends tried-and-true tradecraft with newly disclosed vulnerabilities to support ongoing attacks
BlackByte
2024-08-27 ⋅ Github (blacklotuslabs) ⋅ Black Lotus Labs
Taking the Crossroads: The Versa Director Zero-Day Exploitation (IOCs)
VersaMem
2024-08-27 ⋅ DailyDarkWeb ⋅ DailyDarkWeb
Threat Actor Claimed to Breach Database of DimeCuba
SILKFIN AGENCY
2024-08-27 ⋅ Lumen ⋅ Black Lotus Labs
Taking the Crossroads: The Versa Director Zero-Day Exploitation
VersaMem
2024-08-27 ⋅ SonicWall ⋅ Security News
AutoIT Bot Targets Gmail Accounts First
2024-08-26 ⋅ Netskope ⋅ Leandro Froes
Static Unpacker for Latrodectus
Latrodectus
2024-08-26 ⋅ The DFIR Report ⋅ The DFIR Report
BlackSuit Ransomware
BlackSuit Cobalt Strike SystemBC
2024-08-24 ⋅ YouTube (Black Hat) ⋅ Charles Li, Che Chang, Greg Chen
Chinese APT: A Master of Exploiting Edge Devices (Video)
SEASPY UNC4841
2024-08-23 ⋅ ITOCHU ⋅ Suguru Ishimaru, Yusuke Niwa
Pirates of The Nang Hai: Follow the Artifacts No One Know
Cobalt Strike Xiangoop
2024-08-23 ⋅ TEAMT5 ⋅ Still Hsu
Sailing the Seven SEAs: Deep Dive into Polaris' Arsenal and Intelligence Insights
Cobalt Strike Hodur PlugX TONESHELL