Click here to download all references as Bib-File.•
| 2024-01-09
⋅
Securonix
⋅
New RE#TURGENCE Attack Campaign: Turkish Hackers Target MSSQL Servers to Deliver Domain-Wide MIMIC Ransomware Mimic Ransomware |
| 2024-01-09
⋅
BitSight
⋅
Data Insights on AgentTesla and OriginLogger Victims Agent Tesla OriginLogger |
| 2024-01-08
⋅
YouTube (Embee Research)
⋅
Javascript Malware Analysis - Decoding an AgentTesla Loader Agent Tesla |
| 2023-12-20
⋅
ThreatMon
⋅
GhostLocker Ransomware Analysis Report (Paywall) GhostLocker |
| 2023-12-20
⋅
ropgadget.com
⋅
The Origin of OriginLogger & Agent Tesla Agent Tesla OriginLogger |
| 2023-12-13
⋅
CISA
⋅
Russian Foreign Intelligence Service (SVR) Exploiting JetBrains TeamCity CVE Globally GraphDrop |
| 2023-12-12
⋅
Ukrainska Pravda
⋅
Ukrainian intelligence attacks and paralyses Russia's tax system |
| 2023-12-12
⋅
Microsoft
⋅
Threat actors misuse OAuth applications to automate financially driven attacks Storm-1283 Storm-1286 |
| 2023-12-11
⋅
Sentinel LABS
⋅
Sandman APT | China-Based Adversaries Embrace Lua KEYPLUG LuaDream |
| 2023-12-08
⋅
Security Intelligence
⋅
ITG05 operations leverage Israel-Hamas conflict lures to deliver Headlace malware Headlace |
| 2023-12-07
⋅
Microsoft
⋅
Star Blizzard increases sophistication and evasion in ongoing attacks Callisto |
| 2023-12-05
⋅
PWC
⋅
The Tortoise and The Malwahare SnappyTCP |
| 2023-12-04
⋅
cyble
⋅
TrickMo's Return: Banking Trojan Resurgence With New Features TrickMo |
| 2023-12-04
⋅
The Record
⋅
Florida water agency latest to confirm cyber incident as feds warn of nation-state attacks |
| 2023-12-01
⋅
Twitter (@MsftSecIntel)
⋅
Tweet about Storm-1044 and Storm-0216, Danabot leading to Cactus ransomware Cactus DanaBot TA2101 |
| 2023-12-01
⋅
Twitter (@MsftSecIntel)
⋅
Tweet on Danabot leading to cactus ransomware Cactus DanaBot Storm-1044 |
| 2023-12-01
⋅
⋅
Genians
⋅
Cases of attacks disguised as North Korean market price analysis documents, etc. CVE-2022-41128 vulnerability called with HWP, HWPX, DOCX, XLSX files |
| 2023-11-30
⋅
Blackberry
⋅
AeroBlade on the Hunt Targeting the U.S. Aerospace Industry AeroBlade |
| 2023-11-22
⋅
Microsoft
⋅
Diamond Sleet supply chain compromise distributes a modified CyberLink installer LambLoad |
| 2023-11-09
⋅
Microsoft
⋅
Microsoft shares threat intelligence at CYBERWARCON 2023 Blue Tsunami |