Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-10-04 ⋅ Sophos ⋅ Andreas Klopsch
Remove All The Callbacks – BlackByte Ransomware Disables EDR Via RTCore64.sys Abuse
BlackByte
2022-10-04 ⋅ CISA ⋅ US-CERT
Alert (AA22-277A) Impacket and Exfiltration Tool Used to Steal Sensitive Information from Defense Industrial Base Organization
2022-10-04 ⋅ YouTube (John Hammond) ⋅ John Hammond
HAVOC C2 - Demon Bypasses Windows 11 Defender
Havoc
2022-10-04 ⋅ splunk ⋅ Splunk Threat Research Team
Deliver a Strike by Reversing a Badger: Brute Ratel Detection and Analysis
Brute Ratel C4
2022-10-04 ⋅ Medium (@DCSO_CyTec) ⋅ Axel Wauer, Johann Aydinbas
MSSQL, meet Maggie
Maggie
2022-10-03 ⋅ Check Point Research ⋅ Check Point Research
3rd October – Threat Intelligence Report
Guacamaya
2022-10-03 ⋅ Trend Micro ⋅ Jaromír Hořejší, Joseph Chen
Water Labbu Abuses Malicious DApps to Steal Cryptocurrency
Cobalt Strike Water Labbu
2022-10-03 ⋅ vmware ⋅ Threat Analysis Unit
Emotet Exposed: A Look Inside the Cybercriminal Supply Chain
Emotet
2022-10-03 ⋅ Kaspersky Labs ⋅ GReAT
DeftTorero: tactics, techniques and procedures of intrusions revealed
Nightrunner Tunna ASPXSpy LaZagne ExplosiveRAT reGeorg Volatile Cedar
2022-10-03 ⋅ Check Point ⋅ Marc Salinas Fernandez
Bumblebee: increasing its capacity and evolving its TTPs
BumbleBee Cobalt Strike Meterpreter Sliver Vidar
2022-10-03 ⋅ One Night in Norfolk ⋅ Norfolk
Some Notes on VIRTUALGATE
VIRTUALGATE
2022-10-02 ⋅ DataBreaches.net ⋅ Dissent
Thailand’s THE ICON GROUP hacked by DESORDEN
Desorden Group
2022-10-01 ⋅ Youtube (Virus Bulletin) ⋅ Google Threat Analysis Group, Luca Nagy
Uncovering a broad criminal ecosystem powered by one of the largest botnets, Glupteba. (slides)
Glupteba
2022-10-01 ⋅ Youtube (Virus Bulletin) ⋅ Google Threat Analysis Group, Luca Nagy
Uncovering a broad criminal ecosystem powered by one of the largest botnets, Glupteba.
Glupteba
2022-10-01 ⋅ Yahoo Finance ⋅ Diego Oré
Analysis-Mexico data hack exposes government cybersecurity vulnerability
Guacamaya
2022-10-01 ⋅ Malware Hell ⋅ c3rb3ru5d3d53c
DarkCloud Stealer Triage
DarkCloud Stealer
2022-10-01 ⋅ Github (k8gege) ⋅ k8gege
Ladon hacking framework
Ladon
2022-09-30 ⋅ ESET Research ⋅ Peter Kálnai
Amazon‑themed campaigns of Lazarus in the Netherlands and Belgium
BLINDINGCAN FudModule HTTP(S) uploader LambLoad TOUCHMOVE
2022-09-30 ⋅ Virus Bulletin ⋅ Matěj Havránek, Peter Kálnai
Lazarus & BYOVD: evil to the Windows core
FudModule
2022-09-30 ⋅ Cloudsek ⋅ Anandeshwar Unnikrishnan
Technical Analysis of MedusaLocker Ransomware
MedusaLocker