Click here to download all references as Bib-File.•
| 2023-05-07
⋅
Twitter (@embee_research)
⋅
AgentTesla - Full Loader Analysis - Resolving API Hashes Using Conditional Breakpoints Agent Tesla |
| 2023-04-27
⋅
PRODAFT Threat Intelligence
⋅
Nomadic Octopus’ Paperbug Campaign Octopus DustSquad |
| 2023-04-20
⋅
Recorded Future
⋅
Xiaoqiying/Genesis Day Threat Actor Group Targets South Korea, Taiwan Xiaoqiying |
| 2023-04-19
⋅
Microsoft
⋅
Exploring STRONTIUM's Abuse of Cloud Services FusionDrive |
| 2023-04-18
⋅
Department of Justice
⋅
U.S. Citizens and Russian Intelligence Officers Charged with Conspiring to Use U.S. Citizens as Illegal Agents of the Russian Government |
| 2023-04-18
⋅
Microsoft
⋅
Nation-state threat actor PHOSPHORUS refines tradecraft to attack high-value targets Drokbk APT35 |
| 2023-04-14
⋅
Security Intelligence
⋅
Ex-Conti and FIN7 Actors Collaborate with New Domino Backdoor Minodo |
| 2023-04-13
⋅
GOV.PL
⋅
HALFRIG - Malware Analysis Report HALFRIG |
| 2023-04-13
⋅
GOV.PL
⋅
QUARTERRIG - Malware Analysis Report QUARTERRIG |
| 2023-04-13
⋅
GOV.PL
⋅
SNOWYAMBER - Malware Analysis Report GraphicalNeutrino |
| 2023-04-13
⋅
Microsoft
⋅
Threat actors strive to cause Tax Day headaches CloudEyE Remcos |
| 2023-04-13
⋅
Sublime
⋅
Detecting QakBot: WSF attachments, OneNote files, and generic attack surface reduction QakBot |
| 2023-04-13
⋅
GOV.PL
⋅
Espionage campaign linked to Russian intelligence services |
| 2023-04-12
⋅
Akamai
⋅
Investigating the resurgence of the Mexals campaign |
| 2023-04-11
⋅
China Cybersecurity Industry Alliance
⋅
Review of Cyberattacks from US Intelligence Agencies - Based on Global Cybersecurity Communities' Analyses DuQu Flame Gauss Stuxnet |
| 2023-04-11
⋅
Microsoft
⋅
DEV-0196: QuaDream’s “KingsPawn” malware used to target civil society in Europe, North America, the Middle East, and Southeast Asia Carmine Tsunami |
| 2023-04-07
⋅
Elastic
⋅
Attack chain leads to XWORM and AGENTTESLA Agent Tesla XWorm |
| 2023-04-07
⋅
Microsoft
⋅
MERCURY and DEV-1084: Destructive attack on hybrid environment DarkBit MuddyWater Storm-1084 |
| 2023-03-31
⋅
Blackberry
⋅
Initial Implants and Network Analysis Suggest the 3CX Supply Chain Operation Goes Back to Fall 2022 3CX Backdoor |
| 2023-03-31
⋅
Youtube (ThreatCatch)
⋅
Sinkholing the Domain Generation Algorithm of m0yv Expiro m0yv |