Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2023-04-21 ⋅ K7 Security ⋅ Sudeep Waingankar
MuddyWaters back with DarkBit
DarkBit
2023-04-21 ⋅ Symantec ⋅ Threat Hunter Team
X_Trader Supply Chain Attack Affects Critical Infrastructure Organizations in U.S. and Europe
VEILEDSIGNAL
2023-04-21 ⋅ Jamf Blog ⋅ Ferdous Saljooki, Jaron Bradley
BlueNoroff APT group targets macOS with ‘RustBucket’ Malware
RustBucket
2023-04-20 ⋅ ESET Research ⋅ Marc-Etienne M.Léveillé, Peter Kálnai
Linux malware strengthens links between Lazarus and the 3CX supply‑chain attack
BADCALL SimpleTea POOLRAT 3CX Backdoor BADCALL IconicStealer
2023-04-20 ⋅ Recorded Future ⋅ Insikt Group
Xiaoqiying/Genesis Day Threat Actor Group Targets South Korea, Taiwan
Xiaoqiying
2023-04-20 ⋅ OALabs ⋅ Sergei Frankoff
CryptNET Ransomware
CryptNET
2023-04-20 ⋅ Securonix ⋅ Den Iyzvyk, Oleg Kolesnikov, Tim Peck
New OCX#HARVESTER Attack Campaign Leverages a Modernized More_eggs Suite to Target Victims
More_eggs
2023-04-20 ⋅ VirusTotal ⋅ Vicente Diaz
APT43: An investigation into the North Korean group’s cybercrime operations
2023-04-20 ⋅ Mandiant ⋅ ADRIAN SANCHEZ, DANIEL SCOTT, Dimiter Andonov, Fred Plan, Jake Nicastro, JEFF JOHNSON, Marius Fodoreanu, RENATO FONTANA
3CX Software Supply Chain Compromise Initiated by a Prior Software Supply Chain Compromise; Suspected North Korean Actor Responsible
POOLRAT IconicStealer UNC4736
2023-04-20 ⋅ Github (dodo-sec) ⋅ dodo-sec
An analysis of syscall usage in Cobalt Strike Beacons
Cobalt Strike
2023-04-20 ⋅ Secureworks ⋅ Counter Threat Unit ResearchTeam
Bumblebee Malware Distributed Via Trojanized Installer Downloads
BumbleBee Cobalt Strike
2023-04-19 ⋅ Bleeping Computer ⋅ Bill Toulas
March 2023 broke ransomware attack records with 459 incidents
Clop WhiteRabbit BianLian Black Basta BlackCat LockBit Medusa PLAY Royal Ransom
2023-04-19 ⋅ Google ⋅ Google Threat Analysis Group
Ukraine remains Russia’s biggest cyber focus in 2023
ROMCOM RAT
2023-04-19 ⋅ ⋅ F.A.C.C.T. ⋅ Editor
A new group of Shadow ransomware attacks large industrial enterprises in Russia
2023-04-19 ⋅ Medium (@simone.kraus) ⋅ Simone Kraus
Rorschach Ransomware Analysis with Attack Flow
Rorschach Ransomware
2023-04-19 ⋅ Sophos ⋅ Andreas Klopsch
‘AuKill’ EDR killer malware abuses Process Explorer driver
AuKill
2023-04-19 ⋅ Google ⋅ Billy Leonard, Google Threat Analysis Group
Ukraine remains Russia’s biggest cyber focus in 2023
Rhadamanthys
2023-04-19 ⋅ Team Cymru ⋅ S2 Research Team
AllaKore(d) the SideCopy Train
AllaKore
2023-04-18 ⋅ KrebsOnSecurity ⋅ Brian Krebs
Giving a Face to the Malware Proxy Service ‘Faceless’
2023-04-18 ⋅ Avast Decoded ⋅ Martin Chlumecký
DDosia Project: How NoName057(16) is trying to improve the efficiency of DDoS attacks
Dosia