Click here to download all references as Bib-File.•
| 2023-03-25
⋅
kienmanowar Blog
⋅
[QuickNote] Decrypting the C2 configuration of Warzone RAT Ave Maria |
| 2023-03-24
⋅
Kaspersky Labs
⋅
APT attacks on industrial organizations in H2 2022 Earth Longzhi Storm-0530 UNC3890 |
| 2023-03-24
⋅
Microsoft
⋅
Guidance for investigating attacks using CVE-2023-23397 |
| 2023-03-23
⋅
Mandiant
⋅
UNC961 in the Multiverse of Mandiant: Three Encounters with a Financially Motivated Threat Actor HOLERUN LIGHTBUNNY Prophet Spider |
| 2023-03-23
⋅
Logpoint
⋅
Emerging Threats: AgentTesla – A Review and Detection Strategies Agent Tesla |
| 2023-03-23
⋅
SentinelOne
⋅
Operation Tainted Love | Chinese APTs Target Telcos in New Attacks mim221 |
| 2023-03-23
⋅
Red Canary
⋅
2023 / 5.0 Threat Dection Report: Techniques, Trend, and Takeaways |
| 2023-03-22
⋅
Atlantic Council
⋅
The 5x5—Conflict in Ukraine’s information environment |
| 2023-03-22
⋅
Mandiant
⋅
We (Did!) Start the Fire: Hacktivists Increasingly Claim Targeting of OT Systems |
| 2023-03-22
⋅
Cisco Talos
⋅
Emotet Resumes Spam Operations, Switches to OneNote Emotet |
| 2023-03-21
⋅
Zscaler
⋅
The Unintentional Leak: A glimpse into the attack vectors of APT37 Chinotto |
| 2023-03-21
⋅
Github (rivitna)
⋅
BlackCat v3 Decryptor Scripts BlackCat BlackCat |
| 2023-03-21
⋅
Cleafy
⋅
Nexus: a new Android botnet? Nexus |
| 2023-03-20
⋅
PWC
⋅
Cyber Threats 2022: A Year in Retrospect Black Basta Black Basta Earth Lusca GOLD REBELLION |
| 2023-03-20
⋅
ThreatMon
⋅
Cybergun: Technical Analysis of the Armageddon's Infostealer Pteranodon |
| 2023-03-20
⋅
Mandiant
⋅
Move, Patch, Get Out the Way: 2022 Zero-Day Exploitation Continues at an Elevated Pace |
| 2023-03-20
⋅
NVISO Labs
⋅
IcedID’s VNC Backdoors: Dark Cat, Anubis & Keyhole IcedID |
| 2023-03-20
⋅
SecurityIntelligence
⋅
When the Absence of Noise Becomes Signal: Defensive Considerations for Lazarus FudModule FudModule |
| 2023-03-17
⋅
DeepInstinct
⋅
CVE-2023-23397: Exploitations in the Wild – What You Need to Know |
| 2023-03-17
⋅
Microsoft
⋅
KillNet and affiliate hacktivist groups targeting healthcare with DDoS attacks |