Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2023-11-06 ⋅ Security Intelligence ⋅ Golo Mühr, Ole Villadsen
GootBot – Gootloader’s new approach to post-exploitation
GootLoader UNC2565
2023-10-31 ⋅ Infoblox ⋅ Infoblox Threat Intelligence Group
Prolific Puma: Shadowy Link Shortening Service Enables Cybercrime
Prolific Puma
2023-10-30 ⋅ eSentire ⋅ eSentire
Nitrogen Campaign 2.0: Reloads with Enhanced Capabilities Leading to ALPHV/BlackCat Ransomware
BlackCat Nitrogen Loader
2023-10-30 ⋅ Checkpoint ⋅ Checkpoint Research
30TH OCTOBER – THREAT INTELLIGENCE REPORT
SingularityMD
2023-10-25 ⋅ Microsoft ⋅ Microsoft Incident Response, Microsoft Threat Intelligence
Octo Tempest crosses boundaries to facilitate extortion, encryption, and destruction
BlackCat BlackCat Lumma Stealer
2023-10-18 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Multiple North Korean threat actors exploiting the TeamCity CVE-2023-42793 vulnerability
FeedLoad ForestTiger HazyLoad RollSling Silent Chollima
2023-10-13 ⋅ Twitter (@MsftSecIntel) ⋅ Microsoft Threat Intelligence
Tweet on Storm-1575 and Dadsec phishing platform
Storm-1575
2023-10-11 ⋅ Twitter (@MsftSecIntel) ⋅ Microsoft Threat Intelligence
Tweet on Storm-0062 exploiting CVE-2023-22515
Storm-0062
2023-10-10 ⋅ cyble ⋅ Cyble
Threat Actor deploys Mythic’s Athena Agent to target Russian Semiconductor Suppliers
Athena
2023-10-06 ⋅ ITOCHU ⋅ ITOCHU Cyber & Intelligence Inc.
Sequel: Gifts from Tropical Pirates - Who is the Sender? Look for the Attacker Group
EntryShell SparrowDoor
2023-10-05 ⋅ Securonix ⋅ Dheeraj Kumar, Ella Dragun
Securonix Threat Labs Monthly Intelligence Insights – September 2023
UAC-0154
2023-10-01 ⋅ Infinitum IT ⋅ Kerime Gencay
Agent Tesla Technical Analysis Report (Paywall)
Agent Tesla
2023-09-25 ⋅ Resecurity ⋅ Cyber Threat Intelligence team
Smishing Triad Impersonates Emirates Post to Target UAE Citizens
Smishing Triad
2023-09-25 ⋅ Securonix ⋅ D. Iuzvyk, Oleg Kolesnikov, Tim Peck
Securonix Threat Labs Security Advisory: New STARK#VORTEX Attack Campaign: Threat Actors Use Drone Manual Lures to Deliver MerlinAgent Payloads
Merlin
2023-09-14 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Peach Sandstorm password spray campaigns enable intelligence collection at high-value targets
APT33
2023-09-12 ⋅ Security Intelligence ⋅ Golo Mühr, Kat Metrick, Ole Villadsen
Email campaigns leverage updated DBatLoader to deliver RATs, stealers
DBatLoader
2023-09-12 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Malware distributor Storm-0324 facilitates ransomware access
JSSLoader Storm-0324
2023-09-11 ⋅ Symantec ⋅ Symantec Threat Intelligence
Tweet about Symantec discovering a new variant of SiestaGraph
SiestaGraph
2023-09-07 ⋅ SecurityIntelligence ⋅ Claire Zaboeva, Golo Mühr, Melissa Frydrych
New Hive0117 phishing campaign imitates conscription summons to deliver DarkWatchman malware
DarkWatchman
2023-08-29 ⋅ Viuleeenz ⋅ Alessandro Strino
Agent Tesla - Building an effective decryptor
Agent Tesla