Click here to download all references as Bib-File.•
| 2024-08-05
⋅
BreachNova
⋅
How attacker achive Email Spoofing, Message Spoofing, IP and UserAgent Spoofing |
| 2024-08-04
⋅
Twitter (@embee_research)
⋅
Decoding a Cobalt Strike Downloader Script With CyberChef Cobalt Strike |
| 2024-08-02
⋅
Aqua Nautilus
⋅
Panamorfi: A New Discord DDoS Campaign Mineping |
| 2024-08-02
⋅
Volexity
⋅
StormBamboo Compromises ISP to Abuse Insecure Software Update Mechanisms CDDS DUSTPAN MgBot |
| 2024-08-01
⋅
Elastic
⋅
BITS and Bytes: Analyzing BITSLOTH, a newly identified backdoor BITSloth |
| 2024-08-01
⋅
Krakz
⋅
Latrodectus dropped by BR4 Brute Ratel C4 Latrodectus |
| 2024-08-01
⋅
Intel 471
⋅
BlankBot - a new Android banking trojan with screen recording, keylogging and remote control capabilities BlankBot |
| 2024-07-31
⋅
Cleafy
⋅
BingoMod: The new android RAT that steals money and wipes data BingoMod |
| 2024-07-31
⋅
Securonix
⋅
Research Update: Threat Actors Behind the DEV#POPPER Campaign Have Retooled and are Continuing to Target Software Developers via Social Engineering BeaverTail |
| 2024-07-30
⋅
HackRead
⋅
Hacker Scrapes and Publishes 100,000-Line CrowdStrike IoC List SAMBASPIDER |
| 2024-07-30
⋅
Spamhaus
⋅
Too big to care? - Our disappointment with Cloudflare’s anti-abuse posture |
| 2024-07-29
⋅
cocomelonc
⋅
Malware and cryptography 31: CAST-128 payload encryption. Simple C example. |
| 2024-07-29
⋅
loginsoft
⋅
Blue Screen Mayhem: When CrowdStrike's Glitch Became Threat Actor's Playground Daolpu HijackLoader Remcos |
| 2024-07-29
⋅
Microsoft
⋅
Ransomware operators exploit ESXi hypervisor vulnerability for mass encryption Black Basta Black Basta Storm-0506 |
| 2024-07-29
⋅
Mandiant
⋅
UNC4393 Goes Gently into the SILENTNIGHT Black Basta QakBot sRDI SystemBC Zloader UNC4393 |
| 2024-07-28
⋅
cyber5w
⋅
CyberGate Technical Analysis CyberGate |
| 2024-07-26
⋅
Darktrace
⋅
Disarming the WarmCookie Backdoor: Darktrace’s Oven-Ready Solution WarmCookie |
| 2024-07-26
⋅
Trellix
⋅
Handala’s Wiper Targets Israel Handala Hatef Handala |
| 2024-07-26
⋅
SOC Prime
⋅
UAC-0102 Phishing Attack Detection: Hackers Steal Authentication Data Impersonating the UKR.NET Web Service UAC-0102 |
| 2024-07-26
⋅
SecurityIntelligence
⋅
Hive0137 and AI-supplemented malware distribution WarmCookie XWorm Hive0137 |