Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2024-04-08 ⋅ 0x0d4y ⋅ 0x0d4y
IcedID – Technical Analysis of an IcedID Lightweight x64 DLL
IcedID
2024-04-08 ⋅ Zscaler ⋅ Nikolaos Pantazopoulos
Automating Pikabot’s String Deobfuscation
Pikabot
2024-04-07 ⋅ HackRead ⋅ WAQAS
Hacker Leaks 8.5M U.S. Environmental Protection Agency (EPA) Contact Data (UPDATED)
USDoD
2024-04-07 ⋅ cyber5w ⋅ M4lcode
Gafgyt Backdoor Analysis
Bashlite
2024-04-05 ⋅ Heimdal Security ⋅ Madalina Popovici
Powerhost’s ESXi Servers Encrypted with New SEXi Ransomware
SEXi SEXi
2024-04-05 ⋅ DARKReading ⋅ Tara Seals
Ransomware Desires VMware Hypervisors in Ongoing Campaign
SEXi SEXi
2024-04-04 ⋅ Mandiant ⋅ Ashley Pearson, Austin Larsen, Billy Wong, John Wolfram, Joseph Pisano, Josh Murchie, Lukasz Lamparski, Matt Lin, Ron Craft, Ryan Hall, Shawn Chew, Tyler McLellan
Cutting Edge, Part 4: Ivanti Connect Secure VPN Post-Exploitation Lateral Movement Case Studies
BRICKSTORM TONERJAM
2024-04-04 ⋅ Mandiant ⋅ Ashley Pearson, Austin Larsen, Billy Wong, John Wolfram, Joseph Pisano, Josh Murchie, Lukasz Lamparski, Matt Lin, Ron Craft, Ryan Hall, Shawn Chew, Tyler McLellan
Cutting Edge, Part 4: Ivanti Connect Secure VPN Post-Exploitation Lateral Movement Case Studies
BRICKSTORM TONERJAM UNC3569 UNC5266 UNC5291 UNC5330 UNC5337 UTA0178
2024-04-04 ⋅ Cisco Talos ⋅ Chetan Raghuprasad, Joey Chen
CoralRaider targets victims’ data and social media accounts
CoralRaider
2024-04-04 ⋅ The Record ⋅ Daryna Antoniuk
Hackers claim to breach database containing thousands of Russian criminal records
RGB-TEAM
2024-04-04 ⋅ Twitter (@BushidoToken) ⋅ BushidoToken
Tweet about the SEXi Ransomware attack on IXMETRO POWERHOST
SEXi
2024-04-04 ⋅ Microsoft ⋅ Clint Watts, Microsoft Threat Analysis Center (MTAC)
China tests US voter fault lines and ramps AI content to boost its geopolitical interests
2024-04-04 ⋅ InfoSec Handlers Diary Blog ⋅ John Moutos
Slicing up DoNex with Binary Ninja
Donex
2024-04-04 ⋅ Twitter (@embee_research) ⋅ Embee_research
TLS Certificate For Threat Intelligence - Identifying MatanBuchus Domains Through Hardcoded Certificate Values
Matanbuchus
2024-04-04 ⋅ Deep instinct ⋅ Simon Kenin
DarkBeatC2: The Latest MuddyWater Attack Framework
MuddyC2Go
2024-04-04 ⋅ Proofpoint ⋅ Proofpoint Threat Research Team, Team Cymru, TEAM CYMRU S2 THREAT RESEARCH
Latrodectus: This Spider Bytes Like Ice
IcedID Latrodectus
2024-04-03 ⋅ HarfangLab ⋅ Alice Climent-Pommeret
Raspberry Robin and its new anti-emulation trick
Raspberry Robin
2024-04-03 ⋅ Resecurity ⋅ Resecurity
The New Version Of JsOutProx Is Attacking Financial Institutions In APAC And MENA Via GitLab Abuse
JSOutProx
2024-04-03 ⋅ ThreatMon ⋅ Kerime Gencay
XZ Utils Backdoor Research Report CVE-2024-3094
xzbot
2024-04-03 ⋅ Bleeping Computer ⋅ Ionut Ilascu
Microsoft still unsure how hackers stole MSA key in 2023 Exchange attack