Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-10-25 ⋅ ⋅ Національної поліції України ⋅ Національна поліція України
Ukrainian law enforcement officers blocked the activities of members of an international transnational hacker group
2021-10-25 ⋅ CrowdStrike ⋅ Falcon OverWatch Team
OverWatch Elite In Action: Prompt Call Escalation Proves Vital to Containing Attack
MimiKatz
2021-10-25 ⋅ lacework ⋅ Lacework Labs
TeamTNT Continues to Target Exposed Docker API
2021-10-25 ⋅ Microsoft ⋅ Microsoft Threat Intelligence Center (MSTIC)
NOBELIUM targeting delegated administrative privileges to facilitate broader attacks
2021-10-24 ⋅ Microsoft ⋅ Tom Burt
New activity from Russian actor Nobelium
2021-10-24 ⋅ Sophos ⋅ Sean Gallagher
Node poisoning: hijacked package delivers coin miner and credential-stealing backdoor
DanaBot Monero Miner
2021-10-24 ⋅ CitizenLab ⋅ Bahr Abdul Razzak, Bill Marczak, John Scott-Railton, Ron Deibert, Siena Anstis
Breaking the News New York Times Journalist Ben Hubbard Hacked with Pegasus after Reporting on Previous Hacking Attempts
Chrysaor
2021-10-23 ⋅ Cado Security ⋅ Cado Security
Links to Previous Attacks in UAParserJS Compromise
2021-10-22 ⋅ Elliptic ⋅ Elliptic Intel
DarkSide bitcoins on the move following government cyberattack against REvil ransomware group
BlackMatter DarkSide BlackMatter DarkSide
2021-10-22 ⋅ Twitter (@GelosSnake) ⋅ Omri Segev Moyal
Tweet on List of wallets used by Darkside/Blackmatter Operator to split out the money
BlackMatter DarkSide BlackMatter DarkSide
2021-10-22 ⋅ Huntress Labs ⋅ Caleb Stewart
Threat Advisory: Hackers Are Exploiting a Vulnerability in Popular Billing Software to Deploy Ransomware
2021-10-22 ⋅ HUNT & HACKETT ⋅ Krijn de Mik
Advanced IP Scanner: the preferred scanner in the A(P)T toolbox
Conti DarkSide Dharma Egregor Hades REvil Ryuk
2021-10-22 ⋅ Darkowl ⋅ Darkowl
“Page Not Found”: REvil Darknet Services Offline After Attack Last Weekend
REvil REvil
2021-10-22 ⋅ Fortinet ⋅ Cara Lin
Recent Attack Uses Vulnerability on Confluence Server
Tsunami BillGates
2021-10-22 ⋅ TEAMT5 ⋅ TeamT5
Assassinations of "MiniNinja" in Various APAC Countries
ToddyCat
2021-10-21 ⋅ Bleeping Computer ⋅ Lawrence Abrams
Evil Corp demands $40 million in new Macaw ransomware attacks
Macaw
2021-10-21 ⋅ Bitdefender ⋅ Bitdefender
Digitally-Signed Rootkits are Back – A Look at FiveSys and Companions
NetfilterRootkit
2021-10-21 ⋅ CrowdStrike ⋅ Alex Clinton, Tasha Robinson
Stopping GRACEFUL SPIDER: Falcon Complete’s Fast Response to Recent SolarWinds Serv-U Exploit Campaign
Cobalt Strike FlawedGrace TinyMet
2021-10-21 ⋅ Juniper ⋅ Nataraja G
Apache HTTP Server CVE-2021-42013 and CVE-2021-41773 Exploited in the Wild
2021-10-21 ⋅ curatedintel ⋅ Trevor Giffen
Initial Access Broker Landscape