Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-10-01 ⋅ Microsoft ⋅ Microsoft
Microsoft Digital Defense Report
Sea Turtle
2021-09-27 ⋅ Microsoft ⋅ Microsoft Threat Intelligence Center (MSTIC), Ramin Nafisi
FoggyWeb: Targeted NOBELIUM malware leads to persistent backdoor
2021-09-27 ⋅ Microsoft ⋅ Detection and Response Team (DART)
A guide to combatting human-operated ransomware: Part 2
2021-09-25 ⋅ Twitter (@MsftSecIntel) ⋅ Microsoft Security Intelligence
Thread on Malicious Android apps posing as bank loan services are being widely distributed to targets in Asia
Unidentified APK 006
2021-09-21 ⋅ Microsoft ⋅ Microsoft 365 Defender Threat Intelligence Team
Catching the big fish: Analyzing a large-scale phishing-as-a-service operation
2021-09-20 ⋅ Microsoft ⋅ Detection and Response Team (DART)
A guide to combatting human-operated ransomware: Part 1
2021-09-18 ⋅ Microsoft ⋅ Russell McDonald
Hunting for OMI Vulnerability Exploitation with Azure Sentinel
Mirai
2021-09-15 ⋅ Microsoft ⋅ Microsoft 365 Defender Threat Intelligence Team, Microsoft Threat Intelligence Center (MSTIC)
Analyzing attacks that exploit the CVE-2021-40444 MSHTML vulnerability
EXOTIC LILY
2021-09-15 ⋅ Microsoft ⋅ Microsoft 365 Defender Threat Intelligence Team, Microsoft Threat Intelligence Center (MSTIC)
Analyzing attacks that exploit the CVE-2021-40444 MSHTML vulnerability
Cobalt Strike
2021-09-07 ⋅ Bleeping Computer ⋅ Ionut Ilascu
Microsoft shares temp fix for ongoing Office 365 zero-day attacks ( CVE-2021-40444)
2021-09-03 ⋅ FireEye ⋅ Adrian Sanchez Hernandez, Alex Pennino, Andrew Rector, Brendan McKeague, Govand Sinjari, Harris Ansari, John Wolfram, Joshua Goddard, Yash Gupta
PST, Want a Shell? ProxyShell Exploiting Microsoft Exchange Servers
CHINACHOPPER HTran
2021-09-02 ⋅ Microsoft ⋅ Microsoft Offensive Research & Security Engineering team
A deep-dive into the SolarWinds Serv-U SSH vulnerability (DEV-0322)
2021-08-30 ⋅ zero day initiative ⋅ Simon Zuckerbraun
ProxyToken: An Authentication Bypass in Microsoft Exchange Server
2021-08-26 ⋅ npr ⋅ Dina Temple-Raston
China's Microsoft Hack May Have Had A Bigger Purpose Than Just Spying
2021-08-26 ⋅ CrowdStrike ⋅ Yaron Zinar
NTLM Keeps Haunting Microsoft
2021-08-26 ⋅ Microsoft ⋅ Microsoft 365 Defender Threat Intelligence Team
Widespread credential phishing campaign abuses open redirector links
2021-08-25 ⋅ Cybleinc ⋅ cybleinc
​LockFile Ransomware: Exploiting Microsoft Exchange Vulnerabilities Using ProxyShell
LockFile
2021-08-23 ⋅ Sophos SecOps ⋅ Greg Iddon
ProxyShell vulnerabilities in Microsoft Exchange: What to do
LockFile
2021-08-19 ⋅ Microsoft ⋅ David Atch, Gil Regev, Ross Bevington
How to proactively defend against Mozi IoT botnet
Mozi
2021-08-19 ⋅ Huntress Labs ⋅ John Hammond
Microsoft Exchange Servers Still Vulnerable to ProxyShell Exploit