Click here to download all references as Bib-File.•
| 2024-03-27
⋅
Twitter (@embee_research)
⋅
Uncovering Malicious Infrastructure with DNS Pivoting LokiBot XWorm |
| 2024-03-26
⋅
Medium zyadlzyatsoc
⋅
Comprehensive Analysis of EMOTET Malware: Part 1 Emotet |
| 2024-03-26
⋅
K7 Security
⋅
Unknown TTPs of Remcos RAT Remcos |
| 2024-03-26
⋅
Palo Alto Networks Unit 42
⋅
ASEAN Entities in the Spotlight: Chinese APT Group Targeting PUBLOAD |
| 2024-03-26
⋅
Lumen
⋅
The Darkside Of TheMoon TheMoon |
| 2024-03-26
⋅
EchoCTI
⋅
Agent Tesla Technical Analysis Report Agent Tesla |
| 2024-03-25
⋅
Sekoia
⋅
Tycoon 2FA: an in-depth analysis of the latest version of the AiTM phishing kit Saad Tycoon |
| 2024-03-25
⋅
ANY.RUN
⋅
Reverse Engineering Snake Keylogger: Full .NET Malware Analysis Walkthrough 404 Keylogger GaboonGrabber |
| 2024-03-25
⋅
Github (veo)
⋅
vshell VShell |
| 2024-03-25
⋅
embeeresearch
⋅
Latrodectus Deobfuscation - Removal of Junk Comments and Self-Referencing Code Latrodectus |
| 2024-03-25
⋅
iVerify
⋅
Clipping Wings: Our Analysis of a Pegasus Spyware Sample Chrysaor |
| 2024-03-24
⋅
Securonix
⋅
Analysis of DEV#POPPER: New Attack Campaign Targeting Software Developers Likely Associated With North Korean Threat Actors BeaverTail |
| 2024-03-24
⋅
Viuleeenz
⋅
Understanding API Hashing and build a rainbow table for LummaStealer Lumma Stealer |
| 2024-03-22
⋅
RH-ISAC
⋅
Chinese Threat Group UNC5174 Reportedly Exploiting F5 BIG-IP and ScreenConnect CVEs for Active Exploitation GOREVERSE SNOWLIGHT Sliver UNC5174 |
| 2024-03-22
⋅
Beware: Malicious Android Malware Disguised as Government Alerts. |
| 2024-03-22
⋅
Mandiant
⋅
APT29 Uses WINELOADER to Target German Political Parties WINELOADER |
| 2024-03-22
⋅
Palo Alto
⋅
Large-Scale StrelaStealer Campaign in Early 2024 StrelaStealer |
| 2024-03-21
⋅
Mandiant
⋅
Bringing Access Back — Initial Access Brokers Exploit F5 BIG-IP (CVE-2023-46747) and ScreenConnect GOREVERSE SNOWLIGHT Sliver UNC5174 |
| 2024-03-21
⋅
Mandiant
⋅
Bringing Access Back — Initial Access Brokers Exploit F5 BIG-IP (CVE-2023-46747) and ScreenConnect GOREVERSE SNOWLIGHT |
| 2024-03-21
⋅
cyber5w
⋅
CryptNet Ransomware Detailed Analysis CryptNET |