Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2023-04-18 ⋅ Cisco Talos ⋅ Matthew Olney
State-sponsored campaigns target global network infrastructure
2023-04-18 ⋅ NCSC UK ⋅ CISA, FBI, NCSC UK, NSA
APT28 exploits known vulnerability to carry out reconnaissance and deploy malware on Cisco routers
2023-04-18 ⋅ NCSC UK ⋅ United Kingdom’s National Cyber Security Centre (NCSC-UK)
Jaguar Tooth - Cisco IOS malware that collects device information and enables backdoor access
2023-04-18 ⋅ Zscaler ⋅ Meghraj Nandanwar, Shatak Jain
Introducing DevOpt: A Multifunctional Backdoor Arsenal
DevOpt
2023-04-18 ⋅ Checkpoint ⋅ Shavit Yosef
Raspberry Robin: Anti-Evasion How-To & Exploit Analysis
Raspberry Robin
2023-04-18 ⋅ Twitter (@threatinsight) ⋅ Threat Insight
Tweet on TA581 using Keitaro TDS URL to download a .MSI file to deliver BumbleBee malware
BumbleBee
2023-04-18 ⋅ Mandiant ⋅ Mandiant
M-Trends 2023
QUIETEXIT AppleJeus Black Basta BlackCat CaddyWiper Cobalt Strike Dharma HermeticWiper Hive INDUSTROYER2 Ladon LockBit Meterpreter PartyTicket PlugX QakBot REvil Royal Ransom SystemBC WhisperGate
2023-04-18 ⋅ CitizenLab ⋅ Bahr Abdul Razzak, Bill Marczak, John Scott-Railton, Ron Deibert
Triple Threat: NSO Group’s Pegasus Spyware Returns in 2022 with a Trio of iOS 15 and iOS 16 Zero-Click Exploit Chains
2023-04-18 ⋅ Microsoft ⋅ Daniel Simpson, Dianne Gali, Stacyrch140
How Microsoft names threat actors
2023-04-17 ⋅ Medium (@lcam) ⋅ Luca Mella
Data Insights from Russian Cyber Militants: NoName05716
Dosia
2023-04-17 ⋅ AhnLab ⋅ ASEC
8220 Gang Uses Log4Shell Vulnerability to Install CoinMiner
Water Sigbin
2023-04-17 ⋅ AhnLab ⋅ ASEC
Trigona Ransomware Attacking MS-SQL Servers
Trigona
2023-04-17 ⋅ BE42LATE ⋅ B42 Labs
Noname057(16) Attack Tracker
Dosia
2023-04-17 ⋅ JUMPSEC LABS ⋅ max corbridge
Butting Heads with a Threat Actor on an Engagement
2023-04-17 ⋅ Leandro's blog ⋅ Leandro Froes
An in-depth look at the Golang Windows calls
2023-04-16 ⋅ Botconf ⋅ Suweera De Souza
Tracking Bumblebee’s Development
BumbleBee
2023-04-16 ⋅ cocomelonc ⋅ cocomelonc
Malware AV/VM evasion - part 15: WinAPI GetProcAddress implementation. Simple C++ example.
2023-04-16 ⋅ OALabs ⋅ Sergei Frankoff
XORStringsNet
Agent Tesla RedLine Stealer
2023-04-16 ⋅ Twitter (@malwrhunterteam) ⋅ MalwareHunterTeam
Tweet on MacOS Lockbit sample
LockBit
2023-04-16 ⋅ YouTube (botconf eu) ⋅ Crowdstrike Technical Analysis Cell (TAC), Suweera De Souza
Tracking Bumblebee’s Development
BumbleBee