Click here to download all references as Bib-File.•
| 2024-02-28
⋅
VMRay
⋅
Just Carry A Ladder: Why Your EDR Let Pikabot Jump Through Pikabot |
| 2024-02-28
⋅
Spamhaus
⋅
Toot about SmokeLoader dropping Xehook Stealer SmokeLoader |
| 2024-02-27
⋅
Mandiant
⋅
Cutting Edge, Part 3: Investigating Ivanti Connect Secure VPN Exploitation and Persistence Attempts BUSHWALK PITFUEL PITHOOK PITSOCK UNC5325 |
| 2024-02-27
⋅
Mandiant
⋅
Cutting Edge, Part 3: Investigating Ivanti Connect Secure VPN Exploitation and Persistence Attempts BUSHWALK Kubo Injector PITFUEL PITHOOK PITSOCK |
| 2024-02-27
⋅
Cisco Talos
⋅
TimbreStealer campaign targets Mexican users with financial lures TimbreStealer |
| 2024-02-27
⋅
Mandiant
⋅
When Cats Fly: Suspected Iranian Threat Actor UNC1549 Targets Israeli and Middle East Aerospace and Defense Sectors LIGHTRAIL MINIBIKE MINIBUS UNC1549 |
| 2024-02-27
⋅
Bitdefender
⋅
When Stealers Converge: New Variant of Atomic Stealer in the Wild AMOS |
| 2024-02-27
⋅
BitSight
⋅
Hunting PrivateLoader: The malware behind InstallsKey PPI service PrivateLoader RisePro |
| 2024-02-27
⋅
Doubleagent.net
⋅
GTPDOOR - A novel backdoor tailored for covert access over the roaming exchange GTPDOOR |
| 2024-02-27
⋅
Twitter (@greglesnewich)
⋅
Tweet with context on TA421 / APT29 / Midnight Blizzard / BlueBravo / Cozy Bear WINELOADER |
| 2024-02-27
⋅
splunk
⋅
Unveiling Phemedrone Stealer: Threat Analysis and Detections Phemedrone Stealer |
| 2024-02-27
⋅
Github (VenzoV)
⋅
Wikiloader part 3 -> Explorer shellcode WikiLoader |
| 2024-02-27
⋅
Zscaler
⋅
European diplomats targeted by SPIKEDWINE with WINELOADER WINELOADER SPIKEDWINE |
| 2024-02-27
⋅
US Department of Defense
⋅
Russian Cyber Actors Use Compromised Routers to Facilitate Cyber Operations MooBot |
| 2024-02-26
⋅
Morphisec
⋅
Unveiling UAC-0184: The Steganography Saga of the IDAT Loader Delivering Remcos RAT to a Ukraine Entity in Finland SystemBC Babadeda DanaBot HijackLoader Remcos SystemBC UAC-0184 |
| 2024-02-26
⋅
SOC Prime
⋅
UAC-0149 Attack Detection: Hackers Launch a Targeted Attack Against the Armed Forces of Ukraine, as CERT-UA Reports COOKBOX UAC-0149 |
| 2024-02-26
⋅
SpyCloud
⋅
“Pantsless Data”: Decoding Chinese Cybercrime TTPs |
| 2024-02-26
⋅
The DFIR Report
⋅
SEO Poisoning to Domain Control: The Gootloader Saga Continues GootLoader |
| 2024-02-26
⋅
Twitter (@embee_research)
⋅
Advanced CyberChef Techniques for Configuration Extraction - Detailed Walkthrough and Examples NetSupportManager RAT |
| 2024-02-26
⋅
NCSC UK
⋅
SVR cyber actors adapt tactics for initial cloud access |