Click here to download all references as Bib-File.•
2020-05-20
⋅
PTSecurity
⋅
Operation TA505: how we analyzed new tools from the creators of the Dridex trojan, Locky ransomware, and Neutrino botnet FlawedAmmyy |
2020-05-10
⋅
YouTube ( IntroSecCon Videos)
⋅
Intro Sec Con 2020: Daniel Gordon - Threat Intelligence 101 |
2020-04-14
⋅
⋅
Qianxin
⋅
The Lazarus APT organization uses the new crown epidemic bait to target a targeted attack analysis of a country CRAT |
2020-03-23
⋅
Malwarebytes
⋅
Fake “Corona Antivirus” distributes BlackNET remote administration tool BlackNET RAT |
2020-03-19
⋅
Twitter (@MBThreatIntel)
⋅
Tweet on Poulight Stealer Poulight Stealer |
2020-02-13
⋅
Qianxin
⋅
APT Report 2019 Chrysaor Exodus Dacls VPNFilter DNSRat Griffon KopiLuwak More_eggs SQLRat AppleJeus BONDUPDATER Agent.BTZ Anchor AndroMut AppleJeus BOOSTWRITE Brambul Carbanak Cobalt Strike Dacls DistTrack DNSpionage Dtrack ELECTRICFISH FlawedAmmyy FlawedGrace Get2 Grateful POS HOPLIGHT Imminent Monitor RAT jason Joanap KerrDown KEYMARBLE Lambert LightNeuron LoJax MiniDuke PolyglotDuke PowerRatankba Rising Sun SDBbot ServHelper Snatch Stuxnet TinyMet tRat TrickBot Volgmer X-Agent Zebrocy |
2020-01-01
⋅
Dragos
⋅
Threat Intelligence and the Limits of Malware Analysis Exaramel Exaramel Industroyer Lookback NjRAT PlugX |
2019-12-30
⋅
Check Point
⋅
THREAT INTELLIGENCE REPORT lampion |
2019-12-12
⋅
Microsoft
⋅
GALLIUM: Targeting global telecom CHINACHOPPER Ghost RAT HTran MimiKatz Poison Ivy GALLIUM |
2019-12-03
⋅
Malwarebytes
⋅
New version of IcedID Trojan uses steganographic payloads IcedID |
2019-11-29
⋅
Deloitte
⋅
Cyber Threat Intelligence & Incident Response Cobalt Strike |
2019-11-19
⋅
VMWare Carbon Black
⋅
Threat Analysis Unit (TAU) Threat Intelligence Notification: AsyncRAT AsyncRAT |
2019-11-11
⋅
⋅
PTSecurity
⋅
Operation TA505, part four. Twins |
2019-09-16
⋅
Malwarebytes
⋅
Emotet is back: botnet springs back to life with new spam campaign Emotet |
2019-09-04
⋅
CarbonBlack
⋅
CB TAU Threat Intelligence Notification: Winnti Malware 4.0 Winnti |
2019-06-24
⋅
VirIT
⋅
Ransomware REvil - Sodinokibi: Technical analysis and Threat Intelligence Report REvil |
2019-04-30
⋅
ClearSky
⋅
Raw Threat Intelligence 2019-04-30: Oilrig data dump link analysis SpyNote OopsIE |
2019-03-28
⋅
Carbon Black
⋅
CryptoMix Clop Ransomware Disables Startup Repair, Removes & Edits Shadow Volume Copies Clop |
2019-03-15
⋅
Cofense
⋅
Flash Bulletin: Emotet Epoch 1 Changes its C2 Communication Emotet |
2019-02-26
⋅
⋅
Tencent
⋅
Disclosure of SideWinder APT's attack against South Asia SideWinder RAZOR TIGER |