Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2024-09-21 ⋅ Mandar Naik
Malware Analysis - PXRECVOWEIWOEI
0bj3ctivityStealer
2024-09-20 ⋅ Trend Micro ⋅ Charles Adrian Marty, Christian Alpuerto, John Paul Lim, Kyle Philippe Yu, Mark Chester De Quiroz, Mohammed Malubay
How Ransomhub Ransomware Uses EDRKillShifter to Disable EDR and Antivirus Protections
RansomHub Water Bakunawa
2024-09-20 ⋅ CISO Series ⋅ Steve Prentice
Cybersecurity News: INC targets healthcare, Providence schools cyberattack, Apple iPads bricked
INC Storm-0494
2024-09-20 ⋅ McAfee ⋅ Aayush Tyagi, Yashvi Shah
Behind the CAPTCHA: A Clever Gateway of Malware
Emmenhtal Lumma Stealer
2024-09-19 ⋅ Palo Alto Networks Unit 42 ⋅ Dominik Reichel
Discovering Splinter: A First Look at a New Post-Exploitation Red Team Tool
Splinter
2024-09-19 ⋅ Google ⋅ Praveeth DSouza
Finding Malware: Unveiling RECORDSTEALER with Google Security Operations
RecordBreaker
2024-09-19 ⋅ PWC ⋅ John Southworth
COLDWASTREL of space
Callisto
2024-09-19 ⋅ Mandiant ⋅ Mark Lechtik, Matan Mimran, Sarah Bock, Stav Shulman
UNC1860 and the Temple of Oats: Iran’s Hidden Hand in Middle Eastern Networks
OATBOAT
2024-09-19 ⋅ Mandiant ⋅ Mark Lechtik, Matan Mimran, Sarah Bock, Stav Shulman
UNC1860 and the Temple of Oats: Iran’s Hidden Hand in Middle Eastern Networks
CRYPTOSLAY PipeSnoop TEMPLEDOOR UNC1860
2024-09-19 ⋅ Gen Digital ⋅ Luigino Camastra
Evolution of Lazarus ‘FudModule - no longer (stand)alone’
FudModule
2024-09-19 ⋅ Trend Micro ⋅ Cyris Tseng, Philip Chen, Pierre Lee, Sunny Lu, Ted Lee
Earth Baxia Uses Spear-Phishing and GeoServer Exploit to Target APAC
Cobalt Strike Earth Baxia
2024-09-19 ⋅ Trend Micro ⋅ Cyris Tseng, Philip Chen, Pierre Lee, Sunny Lu, Ted Lee
Earth Baxia Uses Spear-Phishing and GeoServer Exploit to Target APAC (IoCs)
Cobalt Strike Earth Baxia
2024-09-18 ⋅ loginsoft ⋅ T B L N Shashank Mannar
Medusa Ransomware: Evolving Tactics in Modern Cyber Extortion
Medusa
2024-09-18 ⋅ Group-IB ⋅ Nam Le Phuong, Vito Alfano
Storm clouds on the horizon: Resurgence of TeamTNT?
TeamTNT
2024-09-18 ⋅ Twitter (@MsftSecIntel) ⋅ Microsoft
Tweet about threat actor Vanilla Tempest
INC GootLoader Storm-0494
2024-09-18 ⋅ ASD, CNMF, CSE Canada, FBI, GCSB, NCSC UK, NSA
People’s Republic of China-Linked Actors Compromise Routers and IoT Devices for Botnet Operations
Nosedive
2024-09-18 ⋅ Lumen ⋅ Black Lotus Labs
Derailing the Raptor Train
Nosedive
2024-09-18 ⋅ U.S. Department of Justice
Court-Authorized Operation Disrupts Worldwide Botnet Used by People’s Republic of China State-Sponsored Hackers
Nosedive
2024-09-18 ⋅ Lumen ⋅ Black Lotus Labs
Derailing The Raptor Train
Nosedive
2024-09-17 ⋅ Mandiant ⋅ Mandiant
An Offer You Can Refuse: UNC2970 Backdoor Deployment Using Trojanized PDF Reader
BURNBOOK MISTPEN