Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-04-06 ⋅ Decrypt ⋅ Stephen Graves, Vismaya V
North Korean Hackers Spent Six Months Infiltrating Drift Before $285M Exploit
2026-04-06 ⋅ PICUS Security ⋅ Umut Bayram
How NoName057(16) Uses DDoSia to Attack NATO Targets
Z-Pentest Alliance
2026-04-03 ⋅ Casco ⋅ Rene Brandel
The Blueprint of a North Korean Attack on Open-Source
JADESNOW
2026-04-03 ⋅ SafeDep ⋅ SafeDep Team
Compromised npm Package mgc Deploys Multi-Platform RAT
2026-04-03 ⋅ Panther ⋅ Michael Baker
jsonspack: Multi-Tenant Node.js RAT — DPRK Supply Chain Campaign
OtterCookie
2026-04-02 ⋅ DailyDarkWeb ⋅ DailyDarkWeb
SnowSoul Attack Hits Multiple Chinese Organizations
SnowSoul
2026-04-02 ⋅ Recorded Future ⋅ Insikt Group
Latin America and the Caribbean Cybercrime Landscape
Chronus Group
2026-04-02 ⋅ tracebit ⋅ Alessandro Brucato
Detecting CI/CD Supply Chain Attacks with Canary Credentials
TeamPCP
2026-04-02 ⋅ Elastic ⋅ Remco Sprooten, Ruben Groenewoud
Hooked on Linux: Rootkit Detection Engineering
2026-04-01 ⋅ YouTube (Mandiant) ⋅ Josh Stroschein, Pierre-Marc Bureau
EP24 The Glupteba Takedown: What Happens When Botnet Operators Show Up in Court with Pierre-Marc Bureau
Glupteba
2026-04-01 ⋅ SOC Prime ⋅ Daryna Olyniychuk
UAC-0255 Attack Detection: Threat Actors Impersonate CERT-UA to Infect Ukrainian Public and Private Sector Organizations With AGEWHEEZE RAT
AGEWHEEZE Cyber Serp
2026-04-01 ⋅ Zscalar ⋅ Avinash Kumar, Jithin Prajeev Nair, Mallikarjun Piddannavar, Manisha Ramcharan Prajapati
Anthropic Claude Code Leak
GhostSocks Vidar
2026-04-01 ⋅ cocomelonc ⋅ cocomelonc
MacOS hacking part 13: sysinfo stealer via VirusTotal API. Simple C example
2026-03-31 ⋅ Google ⋅ Adrian Hernandez, Ashley Zaya, Austin Larsen, Christopher Gardner, Dima Lenz, Michael Rudden, Mon Liclican, Tyler McLellan
North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack
WAVESHAPER
2026-03-30 ⋅ Trend Micro ⋅ John Rainier Navato
TeamPCP’s Telnyx Attack Marks a Shift in Tactics Beyond LiteLLM
TeamPCP
2026-03-30 ⋅ Synthient ⋅ Synthient
ProxyBox: Socks5Systemz Lives On
Socks5Systemz
2026-03-29 ⋅ ⋅ Cert-UA ⋅ Cert-UA
UAC-0255 cyberattack disguised as a notification from CERT-UA using the AGEWHEEZE software tool (CERT-UA#21075)
AGEWHEEZE Cyber Serp
2026-03-28 ⋅ Nokia ⋅ Nokia Deepfield ERT
Drifter: C2 traffic dressed as camera management
Drifter
2026-03-27 ⋅ aachum ⋅ Izan Pérez Perpén
What We Thought Was SMOKELOADER: Introducing REMUS
Remus SmokeLoader
2026-03-27 ⋅ Twitter (@fbgwls245) ⋅ Bitshadow
Tweet about Killada Ransomware
killada