Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2023-03-09 ⋅ Sentinel LABS ⋅ SentinelLabs
IceFire Ransomware Returns | Now Targeting Linux Enterprise Networks
iceFire
2023-03-09 ⋅ X (@suyog41) ⋅ Yogesh Londhe
Tweet on Cinoshi Setaler
Cinoshi
2023-03-09 ⋅ Mandiant ⋅ Mandiant Intelligence
Stealing the LIGHTSHOW (Part Two) — LIGHTSHIFT and LIGHTSHOW
FudModule
2023-03-09 ⋅ eSentire ⋅ eSentire Threat Response Unit (TRU)
BatLoader Continues to Abuse Google Search Ads to Deliver Vidar Stealer and Ursnif
BATLOADER ISFB Vidar
2023-03-09 ⋅ Talos Intelligence ⋅ Andrew Windsor, Vanja Svajcer
Prometei botnet improves modules and exhibits new capabilities in recent updates
Prometei
2023-03-09 ⋅ Kaspersky ⋅ Haim Zigel, Ilya Tyunkin, Victoria Vlasova
Malvertising through search engines
RedLine Stealer
2023-03-09 ⋅ Github (cocomelonc) ⋅ cocomelonc
Malware AV/VM evasion - part 13: encrypt/decrypt payload via Madryga. Simple C++ example.
2023-03-09 ⋅ Secureworks ⋅ SecureWorks' Counter Threat Unit Research Team
COBALT ILLUSION Masquerades as Atlantic Council Employee
2023-03-09 ⋅ DeepInstinct ⋅ Simon Kenin
DUCKTAIL: Threat Operation Re-emerges with New LNK, PowerShell, and Other Custom Tactics to Avoid Detection
DUCKTAIL
2023-03-09 ⋅ Sophos ⋅ Gabor Szappanos
A border-hopping PlugX USB worm takes its act on the road
PlugX
2023-03-09 ⋅ binarly ⋅ Aleksandr Matrosov
The Untold Story of the BlackLotus UEFI Bootkit
BlackLotus
2023-03-09 ⋅ ASEC ⋅ Sanseo
PlugX Malware Being Distributed via Vulnerability Exploitation
PlugX
2023-03-09 ⋅ Mandiant ⋅ Mandiant Intelligence
Stealing the LIGHTSHOW (Part One) — North Korea's UNC2970
CLOUDBURST TOUCHMOVE TOUCHSHIFT UNC2970
2023-03-09 ⋅ State Service of Special Communication and Information Protection of Ukraine (CIP)
Russia's Cyber Tactics: Lessons Learned 2022
2023-03-09 ⋅ VulnCheck ⋅ Jacob Baines
The VulnCheck 2022 Exploited Vulnerability Report - Missing CISA KEV Catalog Entries
2023-03-09 ⋅ Cyble
BlackSnake Ransomware Emerges from Chaos Ransomware’s Shadow
BlackSnake
2023-03-09 ⋅ cyble ⋅ Cyble
Nexus: The Latest Android Banking Trojan with SOVA Connections
S.O.V.A.
2023-03-08 ⋅ Mandiant ⋅ Ben Read, DANIEL LEE, Stephen Eckels
Suspected Chinese Campaign to Persist on SonicWall Devices, Highlights Importance of Monitoring Edge Devices
UNC4540
2023-03-08 ⋅ Malwarebytes ⋅ Malwarebytes Threat Intelligence Team
Ransomware review: March 2023
Vendetta
2023-03-08 ⋅ ⋅ AhnLab ⋅ Ye Eun
CHM malware (Kimsuky) disguised questionnaires related to North Korea