Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-09-29 ⋅ Mandiant ⋅ Alexander Marvi, Jeremy Koppen, Jonathan Lepore, Tufail Ahmed
Bad VIB(E)s Part One: Investigating Novel Malware Persistence Within ESXi Hypervisors
UNC3886
2022-09-29 ⋅ Perception Point ⋅ Igal Lytzki
Doenerium: It’s Not a Crime to Steal From Thieves
doenerium
2022-09-28 ⋅ Securonix ⋅ Den Iyzvyk, Oleg Kolesnikov, Tim Peck
Securonix Threat Labs Security Advisory: Detecting STEEP#MAVERICK: New Covert Attack Campaign Targeting Military Contractors
2022-09-28 ⋅ Twitter (@ESETresearch) ⋅ ESET Research
Twitter Thread linking CloudMensis to RokRAT / ScarCruft
CloudMensis RokRAT
2022-09-28 ⋅ vmware ⋅ Giovanni Vigna
ESXi-Targeting Ransomware: The Threats That Are After Your Virtual Machines (Part 1)
Avoslocker Babuk Black Basta BlackCat BlackMatter Conti DarkSide HelloKitty Hive LockBit Luna RansomEXX RedAlert Ransomware REvil
2022-09-28 ⋅ Lumen ⋅ Black Lotus Labs
Chaos Is A Go-Based Swiss Army Knife Of Malware
Chaos Kaiji
2022-09-28 ⋅ Recorded Future ⋅ Insikt Group®
1 KEY FOR 1 LOCK: The Chinese Communist Party’s Strategy for Targeted Propaganda
2022-09-28 ⋅ Kaspersky ⋅ GReAT
Prilex: the pricey prickle credit card complex
2022-09-28 ⋅ Barracuda ⋅ Tushar Richabadas
Threat Spotlight: Continuing attacks on Atlassian Confluence zero day
2022-09-28 ⋅ Gigamon ⋅ Pavle Culum, Roman Kroshinsky
Investigating Web Shells
Godzilla Webshell Behinder
2022-09-28 ⋅ ArrowRAT ⋅ ArrowRat
ArrowRat
ArrowRAT
2022-09-27 ⋅ Squiblydoo ⋅ Squiblydoo
Solarmarker: The Old is New
solarmarker
2022-09-27 ⋅ Github (blacklotuslabs) ⋅ Black Lotus Labs
Chaos Is A Go-Based Swiss Army Knife Of Malware (IOCs)
2022-09-27 ⋅ Palo Alto Networks Unit 42 ⋅ Mark Lim
More Than Meets the Eye: Exposing a Polyglot File That Delivers IcedID
PhotoLoader
2022-09-27 ⋅ Cyber Geeks ⋅ Vlad Pasca
A technical analysis of Pegasus for Android – Part 2
Chrysaor
2022-09-27 ⋅ SecurityScorecard ⋅ Vlad Pasca
A Deep Dive Into the APT28’s stealer called CredoMap
CredoMap
2022-09-26 ⋅ Youtube (Virus Bulletin) ⋅ Takahiro Haruyama
Tracking the entire iceberg long term APT malware C2 protocol emulation and scanning
ShadowPad Winnti
2022-09-26 ⋅ SentinelOne ⋅ Dinesh Devadoss, Phil Stokes
Lazarus ‘Operation In(ter)ception’ Targets macOS Users Dreaming of Jobs in Crypto
Interception
2022-09-26 ⋅ Kaspersky ⋅ Artem Ushkov, Haim Zigel, Oleg Kupreev
NullMixer: oodles of Trojans in a single dropper
ColdStealer DanaBot GCleaner Nullmixer PrivateLoader PseudoManuscrypt RedLine Stealer SmokeLoader Vidar
2022-09-26 ⋅ The DFIR Report ⋅ The DFIR Report
BumbleBee: Round Two
BumbleBee Cobalt Strike Meterpreter