Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2020-07-13 ⋅ Github (1d8) ⋅ 1d8
Remcos RAT Macro Dropper Doc
Remcos
2020-07-10 ⋅ Github (eset) ⋅ Matías Porolli
Evilnum — Indicators of Compromise
EVILNUM More_eggs EVILNUM TerraStealer
2020-07-09 ⋅ Github (krautface) ⋅ krautface
Gist with observed grelos skimmer
grelos
2020-06-30 ⋅ Github (elastic) ⋅ Elastic
Detection Rules by Elastic
2020-06-26 ⋅ Github (Bleeping) ⋅ Lawrence Abrams
Ransom .exx notes
RansomEXX
2020-06-25 ⋅ Github (7h3w4lk3r) ⋅ The Walker
Github Repository of PYBACK
pyback
2020-06-22 ⋅ Github (StrangerealIntel) ⋅ Twitter (@Arkbird_SOLG)
FTcode targets European countries
FTCODE
2020-06-17 ⋅ Github (f0wl) ⋅ Marius Genheimer
deICEr: A Go tool for extracting config from IcedID second stage Loaders
IcedID
2020-06-09 ⋅ Github (citizenlab) ⋅ CitizenLab
Dark Basin Indicators of Compromise
Dark Basin
2020-06-09 ⋅ Github (Sentinel-One) ⋅ Gal Kristal
CobaltStrikeParser
Cobalt Strike
2020-06-05 ⋅ ⋅ NSFOCUS ⋅ NSFOCUS
供应链攻击事件——针对Github中Java项目的定向攻击
Octopus Scanner
2020-06-05 ⋅ Github (DanusMinimus) ⋅ Dan Lisichkin
Zero2Auto - Netwalker Walk through
Mailto
2020-05-28 ⋅ Github Security Lab ⋅ Alvaro Muñoz
The Octopus Scanner Malware: Attacking the open source supply chain
Octopus Scanner
2020-05-18 ⋅ Github (dlegezo) ⋅ Denis Legezo
Microcin Decryptor
Microcin
2020-05-07 ⋅ Github (mlodic) ⋅ Matteo Lodi
Ursnif beacon decryptor
Gozi ISFB
2020-05-05 ⋅ Github (StrangerealIntel) ⋅ @Arkbird_SOLG
Operation Flash Cobra
2020-04-24 ⋅ Github (albertzsigovits) ⋅ Albert Zsigovits
LockBit ransomware IoCs
LockBit
2020-04-22 ⋅ Github (jstrosch) ⋅ Josh Stroschein
Gomorrah stealer (.NET binary)
Gomorrah stealer
2020-04-09 ⋅ Github (Tera0017) ⋅ Tera0017
SDBbot Unpacker
SDBbot
2020-04-07 ⋅ Github (3xp0rt) ⋅ 3xp0rt
Decompiled SoranoStealer
Sorano