Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-03-02 ⋅ Medium Mehmet Ergene ⋅ Mehmet Ergene
Hunting for the Behavior: Scheduled Tasks
2021-03-01 ⋅ Medium walmartglobaltech ⋅ Jason Reaves, Joshua Platt
Investigation into the state of Nim malware
BazarNimrod Cobalt Strike
2021-03-01 ⋅ Medium walmartglobaltech ⋅ Jason Reaves, Joshua Platt
Nimar Loader
BazarBackdoor BazarNimrod Cobalt Strike
2021-02-23 ⋅ Medium (Katie’s Five Cents) ⋅ Katie Nickels
A Cyber Threat Intelligence Self-Study Plan: Part 1
2021-02-20 ⋅ Medium (Nasreddine Bencherchali) ⋅ Nasreddine Bencherchali
Finding Forensic Goodness In Obscure Windows Event Logs
2021-02-19 ⋅ Medium 0xthreatintel ⋅ 0xthreatintel
How to unpack SManager APT tool?
SManager
2021-02-15 ⋅ Medium s2wlab ⋅ Sojun Ryu
Operation SyncTrek
AbaddonPOS Azorult Clop DoppelDridex DoppelPaymer Dridex PwndLocker
2021-02-09 ⋅ Medium (@alex.birsan) ⋅ Alex Birsan
Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies
2021-02-08 ⋅ Medium kurtikleiton ⋅ kleiton0x7e
Evade EDR with Shellcode Injection and gain persistence using Registry Run Keys
2021-02-08 ⋅ Medium Sebdraven ⋅ sebdraven
Babuk is distributed packed
Babuk
2021-02-06 ⋅ Medium mariohenkel ⋅ Mario Henkel
Decrypting AzoRult traffic for fun and profit
Azorult
2021-02-03 ⋅ Medium s2wlab ⋅ Hyunmin Suh, Minjei Cho
W1 Feb| EN | Story of the week: Stealers on the Darkweb
Azorult Raccoon Vidar
2021-02-03 ⋅ Medium Confiant ⋅ Jerome Dangu
Malvertising: Made in China
Holcus Installer (Adware)
2021-02-01 ⋅ Medium 0xthreatintel ⋅ 0xthreatintel
Uncovering APT-C-41 (StrongPity) Backdoor
StrongPity
2021-01-26 ⋅ Medium cycrafttechnology ⋅ CyCraft Technology Corp
Threat Attribution — Chimera "Under the Radar"
2021-01-26 ⋅ Medium s2wlab ⋅ Hyunmin Suh
W4 Jan | EN | Story of the week: Ransomware on the Darkweb
Avaddon Babuk LockBit
2021-01-26 ⋅ Medium 0xthreatintel ⋅ 0xthreatintel
Reversing APT Tool : SManager (Unpacked)
SManager
2021-01-25 ⋅ Medium CSIS Techblog ⋅ Benoît Ancel
The Nemty affiliate model
Nemty
2021-01-24 ⋅ Medium vrieshd ⋅ VriesHD
Finding SUNBURST victims and targets by using passive DNS, OSINT
SUNBURST
2021-01-24 ⋅ Medium nasbench ⋅ Nasreddine Bencherchali
Common Tools & Techniques Used By Threat Actors and Malware — Part I