Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2024-02-26 ⋅ The DFIR Report ⋅ The DFIR Report
SEO Poisoning to Domain Control: The Gootloader Saga Continues
GootLoader
2024-02-26 ⋅ Twitter (@embee_research) ⋅ Embee_research
Advanced CyberChef Techniques for Configuration Extraction - Detailed Walkthrough and Examples
NetSupportManager RAT
2024-02-26 ⋅ NCSC UK ⋅ NCSC UK
SVR cyber actors adapt tactics for initial cloud access
2024-02-26 ⋅ cyber5w ⋅ Amr Ashraf
Pikabot Loader Detailed Analysis
Pikabot
2024-02-25 ⋅ YouTube (Embee Research) ⋅ Embee_research
My Longest CyberChef Recipe Ever - 22 Operation Configuration Extractor
NetSupportManager RAT
2024-02-24 ⋅ Cert-UA ⋅ Cert-UA
UAC-0149: Targeted selective attacks against the Defense Forces of Ukraine using COOKBOX (CETRT-UA#9204)
COOKBOX UAC-0149
2024-02-23 ⋅ Palo Alto Networks Unit 42 ⋅ Unit 42
Data From Chinese Security Services Company i-Soon Linked to Previous Chinese APT Campaigns
Winnti Winnti ShadowPad Winnti
2024-02-23 ⋅ Cloudsek ⋅ Mudit Bansal
Chinese APT Tactics and accesses uncovered after analyzing the I-SOON repository
2024-02-23 ⋅ Cyfirma ⋅ cyfirma
Xeno RAT: A New Remote Access Trojan with Advance Capabilities
XenoRAT
2024-02-23 ⋅ Elastic ⋅ Daniel Stepanic, Salim Bitam
PIKABOT, I choose you!
Pikabot
2024-02-22 ⋅ BushidoToken ⋅ BushidoToken
Lessons from the iSOON Leaks
Winnti Winnti ShadowPad Winnti
2024-02-22 ⋅ Dragos ⋅ Josh Hanrahan
VOLTZITE Espionage Operations Targeting U.S. Critical Systems
2024-02-22 ⋅ Sekoia ⋅ Livia Tibirna, Pierre-Antoine D., Quentin Bourgue, Threat & Detection Research Team
Scattered Spider laying new eggs
BlackCat
2024-02-22 ⋅ Uptycs ⋅ Uptycs Threat Research
8220 Gang Cryptomining Campaign Targets Linux & Windows Platforms
Water Sigbin
2024-02-22 ⋅ SPUR ⋅ Sean S.
CloudRouter: 911 Proxy Resurrected
2024-02-22 ⋅ Medium b.magnezi ⋅ 0xMrMagnezi
Malware Analysis - XWorm
XWorm
2024-02-22 ⋅ SentinelOne ⋅ Aleksandar Milenkoski
Doppelgänger | Russia-Aligned Influence Operation Targets Germany
2024-02-21 ⋅ SentinelOne ⋅ Aleksandar Milenkoski, Dakota Cary
Unmasking I-Soon | The Leak That Revealed China's Cyber Operations
2024-02-21 ⋅ Recorded Future ⋅ Insikt Group
Attributing I-SOON: Private Contractor Linked to Multiple Chinese State-sponsored Groups
2024-02-21 ⋅ Microsoft ⋅ Microsoft
Exploit:Python/CVE-2024-1709.A!dha
Storm-0506