Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-02-22 ⋅ kmsec ⋅ Kieran Miyamoto
Tracking DPRK operator IPs over time
2026-02-21 ⋅ kmsec ⋅ Kieran Miyamoto
DPRK tests Google Drive as a malware stager
2026-02-19 ⋅ Elastic ⋅ Elastic Security Labs, Salim Bitam
MIMICRAT: ClickFix Campaign Delivers Custom RAT via Compromised Legitimate Websites
AstarionRAT
2026-02-19 ⋅ Proofpoint ⋅ Proofpoint
(Don't) TrustConnect: It's a RAT in an RMM hat
TrustConnect RAT
2026-02-19 ⋅ GitLab ⋅ Oliver Smith
GitLab Threat Intelligence Team reveals North Korean tradecraft
BeaverTail OtterCookie Contagious Interview
2026-02-18 ⋅ Recorded Future ⋅ Insikt Group
GrayCharlie Hijacks Law Firm Sites in Suspected Supply-Chain Attack
SmartApeSG NetSupportManager RAT SectopRAT GrayCharlie
2026-02-17 ⋅ ANY.RUN ⋅ ANY.RUN
LATAM Businesses Hit by XWorm via Fake Financial Receipts: Full Campaign Analysis
XWorm
2026-02-17 ⋅ Kaspersky ⋅ Kaspersky
Kaspersky discovers Keenadu – a multifaceted Android malware that can come preinstalled on new devices
Keenadu
2026-02-17 ⋅ Hunt.io ⋅ Hunt.io
Fake Homebrew Typosquats Used to Deliver Cuckoo Stealer via ClickFix
2026-02-17 ⋅ Google ⋅ Daniel Sislo, Fernando Tomlinson, John Scarbrough, Jr., Nick Harbour, PETER UKHANOV, Rich Reece
From BRICKSTORM to GRIMBOLT: UNC6201 Exploiting a Dell RecoverPoint for Virtual Machines Zero-Day
BRICKSTORM GRIMBOLT SLAYSTYLE UNC6201
2026-02-17 ⋅ ⋅ CERT.PL ⋅ CERT.PL
ClickFix in action: how a fake captcha can encrypt an entire company
Latrodectus Supper
2026-02-16 ⋅ kmsec ⋅ Kieran Miyamoto
Exposed DPRK reference malware and logs
2026-02-16 ⋅ Huntress Labs ⋅ Anna Pham, Michael Tigges
ClickFix Won't Die. Neither Will Matanbuchus. A New RAT and a Hands-on-Keyboard Intrusion
AstarionRAT Matanbuchus
2026-02-15 ⋅ Github (jrm360seclab) ⋅ Johny Metellus
AODIN X1BQ Projector — Pre-Installed Vo1d Botnet Malware
Void
2026-02-13 ⋅ NSFOCUS ⋅ NSFOCUS
Top Security Incidents of 2025: The Emergence of the ChainedShark APT Group
ChainedShark
2026-02-13 ⋅ kmsec ⋅ Kieran Miyamoto
VMWare artifacts left by a FAMOUS CHOLLIMA operator
2026-02-12 ⋅ ⋅ Polish Cyber Command ⋅ Polish Cyber Command
CVE-2026-21509 – Vulnerability Description and Overview of the Observed Campaign
GRUNT
2026-02-12 ⋅ SOCRadar ⋅ SOCRadar
Dark Web Profile: The Gentlemen Ransomware
Gentlemen The Gentlemen
2026-02-12 ⋅ Botcrawl ⋅ Sean Doyle
Nippon Medical School Musashi Kosugi Hospital Data Breach Claimed by NetRunnerPR
NetRunnerPR
2026-02-12 ⋅ Sekoia ⋅ Pierre Le Bourhis
OysterLoader Unmasked: The Multi-Stage Evasion Loader
Broomstick