Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-05-13 ⋅ 0x3oBAD ⋅ Abdullah Islam
MustangPanda New Backdoor LotusLite
LOTUSLITE
2026-05-11 ⋅ Qianxin ⋅ QiAnXin XLab Team
Threat Actor Mr_Rot13 Actively Exploits CVE-2026-41940 for Backdoor Deployment
Mr_Rot13
2026-05-11 ⋅ pcrisk
Tweet about Lalia Ransomware
Lalia Ransomware
2026-05-11 ⋅ urlscan.io ⋅ urlscan.io
Darcula aka. "Magic Cat"
2026-05-11 ⋅ ThreatFabric ⋅ ThreatFabric
New TrickMo Variant: Device Take Over malware targeting Banking, Fintech, Wallet & Auth apps
TrickMo
2026-05-10 ⋅ AhnLab ⋅ ASEC
April 2026 Dark Web Issue Trend Report
ShadowByt3$
2026-05-07 ⋅ Sophos ⋅ Chaitanya Ghorpade, Gabor Szappanos, Matt Wixey, Rahil Shah, Rahul Dugar
Donuts and Beagles: Fake Claude site spreads backdoor
TriBack Loader
2026-05-07 ⋅ Netskope ⋅ Vini Egerland
OpenClaw hologram: Fake installer ships Rust Infostealer
Vidar
2026-05-07 ⋅ R136a1 ⋅ Dominik Reichel
Where Have All the Complex Windows Malware and Their Analyses Gone?
2026-05-06 ⋅ Elastic ⋅ Daniel Stepanic, Jia Yu Chan, Seth Goodwin, Terrance DeJesus
TCLBANKER: Brazilian Banking Trojan Spreading via WhatsApp and Outlook
TCLBANKER
2026-05-05 ⋅ ESET Research ⋅ Filip Jurčacko
A rigged game: ScarCruft compromises gaming platform in a supply-chain attack
BirdCall
2026-05-05 ⋅ ANY.RUN ⋅ ANY.RUN
New Phishing Campaign Targets US with Credential Theft: What CISOs Need to Know
2026-05-05 ⋅ OpenSourceMalware ⋅ OpenSourceMalware
Lazarus Group Uses Git Hooks To Hide Malware
BeaverTail InvisibleFerret
2026-05-04 ⋅ BlueVoyant ⋅ Joshua Green, Thomas Elkins
Lorem Ipsum Malware: Trojanized MS Teams Installers Deliver Multi-Stage Loader and Backdoor
Lorem Ipsum
2026-05-04 ⋅ Trend Micro ⋅ Ahmed Mohamed Ibrahim, Aliakbar Zahravi
Quasar Linux (QLNX) – A Silent Foothold in the Supply Chain: Inside a Full-Featured Linux RAT With Rootkit, PAM Backdoor, Credential Harvesting Capabilities
QLNX
2026-05-03 ⋅ Medium Ireneusz Tarnowski ⋅ Ireneusz Tarnowski
Multi-stage malware delivery campaign using SEO poisoning and serverless infrastructure
AMOS
2026-05-01 ⋅ kmsec ⋅ Kieran Miyamoto
North Korea's abuse of Cloudflare Workers and Pages
PylangGhost
2026-04-30 ⋅ Kaspersky ⋅ Anna Lazaricheva, Anton Kargin, Victoria Vlasova, Vladimir Gursky
Silver Fox uses the new ABCDoor backdoor to target organizations in Russia and India
ABCDoor
2026-04-27 ⋅ Red Piranha ⋅ Red Piranha
Weekly Detected Threats - April 21 - April 27 2026
Lamashtu
2026-04-27 ⋅ Twitter (@suyog41) ⋅ Yogesh Londhe
Tweet about GeckoStealer
GeckoStealer