Click here to download all references as Bib-File.•
| 2024-05-21
⋅
Sekoia
⋅
Master of Puppets: Uncovering the DoppelGänger pro-Russian influence campaign |
| 2024-05-20
⋅
cyble
⋅
Tiny BackDoor Goes Undetected – Suspected Turla leveraging MSBuild to Evade detection |
| 2024-05-16
⋅
⋅
AhnLab
⋅
Analysis of APT attack cases targeting domestic companies using Dora RAT (Andariel Group) |
| 2024-05-16
⋅
SecurityIntelligence
⋅
Grandoreiro banking trojan unleashed: X-Force observing emerging global campaigns Grandoreiro |
| 2024-05-16
⋅
Symantec
⋅
Springtail: New Linux Backdoor Added to Toolkit Gomir Kimsuky |
| 2024-05-15
⋅
Microsoft
⋅
Threat actors misusing Quick Assist in social engineering attacks leading to ransomware Black Basta Cobalt Strike QakBot SystemBC |
| 2024-05-15
⋅
ESET Research
⋅
To the Moon and back(doors): Lunar landing in diplomatic missions LunarMail |
| 2024-05-15
⋅
Stairwell
⋅
Stairwell threat report: Black Basta overview and detection rules Black Basta Black Basta |
| 2024-05-15
⋅
X (@bryceabdo)
⋅
Tweet on UNC5449 exploiting CVE-2024-30051 to deliver QAKBOT QakBot |
| 2024-05-15
⋅
Microsoft
⋅
Threat actors misusing Quick Assist in social engineering attacks leading to ransomware Black Basta Cobalt Strike QakBot |
| 2024-05-14
⋅
NBC
⋅
China-linked group uses malware to try to spy on commercial shipping, new report says |
| 2024-05-14
⋅
Bern University of Applied Science
⋅
Forensic analysis of hook Android malware Hook |
| 2024-05-14
⋅
Check Point Research
⋅
Foxit PDF “Flawed Design” Exploitation Rafel RAT Agent Tesla AsyncRAT DCRat DONOT Nanocore RAT NjRAT Pony Remcos Venom RAT XWorm |
| 2024-05-14
⋅
Kaspersky
⋅
QakBot attacks with Windows zero-day (CVE-2024-30051) Cobalt Strike QakBot |
| 2024-05-14
⋅
ESET Research
⋅
Ebury is alive but unseen: 400k Linux servers compromised for cryptocurrency theft and financial gain Ebury |
| 2024-05-14
⋅
S-RM
⋅
Breaking new ground? Uncovering Akira's privilege escalation techniques Akira |
| 2024-05-13
⋅
Emerging Threats
⋅
SIGS: W32/Badspace.Backdoor WarmCookie |
| 2024-05-13
⋅
Malsada Tech
⋅
Gootloader Isn’t Broken GootLoader |
| 2024-05-13
⋅
ESET Research
⋅
Ebury is alive but unseen: 400k Linux servers compromised for cryptocurrency theft and financial gain Ebury |
| 2024-05-13
⋅
Recorded Future
⋅
Exploring the Depths of SolarMarker's Multi-tiered Infrastructure solarmarker |