Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-06-07 ⋅ Socket ⋅ Socket
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Shai-Hulud
2026-06-06 ⋅ Antonio Parata Blogspot ⋅ Antonio Parata
shrun, apiwatcher, and argus: three malware analysis tools built with Claude
Lorem Ipsum
2026-06-04 ⋅ Nokia ⋅ Nokia Deepfield ERT
Datasurge: a rogue EDR agent with a DDoS module
Jackskid Mirai Mirai
2026-06-04 ⋅ RESIDENT.NGO ⋅ RESIDENT.NGO Team
Case Study — UNC1151 Gmail Phishing (“Suspicious account activity”) Targeting Belarusian Pro-Democracy Politician, May 2026
2026-06-03 ⋅ Check Point Research ⋅ Alexey Bukhteyev
Impersonation, Click Hijacking, and TDS: Inside a Malware Distribution Ecosystem
AnimateClipper Remus
2026-06-03 ⋅ Microsoft ⋅ Microsoft
How Microsoft names threat actors
Wisteria Tsunami
2026-06-03 ⋅ Proofpoint ⋅ Proofpoint Threat Research Team
TA4922: The Suspected Chinese Crime Group is Going Global
Atlas RAT RomulusLoader SilentRunLoader TA4922
2026-06-03 ⋅ sonatype ⋅ Sonatype Security Research Team
Lazarus Group's Latest: Brandjacking Campaign on npm
2026-06-03 ⋅ Fortinet ⋅ Vincent Li
Inside the Cross-Platform Propagation of a New Gafgyt Variant C0XMO
Bashlite C0XMO
2026-06-02 ⋅ Threat Review Journal ⋅ Threat Review Journal
Investigation into APT 5 and their inner workings of PLA Troop 61786
2026-06-02 ⋅ Qualys ⋅ Aniket Harne
The HazyBeacon Protocol – How Malware Weaponizes Amazon Web Services (AWS) Lambda Function URLs
CL-STA-1020
2026-06-02 ⋅ The Register ⋅ Carly Page
Russian spy agency says foreign spies turned officials' smartphones into surveillance devices
2026-06-01 ⋅ ExaTrack ⋅ ExaTrack
Tracking APT28 PixyNetLoader: Evolutions from 2024 to 2026
PixyNetLoader
2026-06-01 ⋅ Nextron Systems ⋅ Jonathan Peters
Detecting Nimbus Manticore and their sideloading infection chains
MiniFast
2026-05-31 ⋅ Gridinsoft ⋅ Gridinsoft Malware Research Team
DriveSurge Turns Trusted Websites Into ClickFix Malware Traps
DriveSurge
2026-05-31 ⋅ Socket ⋅ Kirill Boychenko
Famous Chollima Targets PHP Developers Through Compromised Packagist Package
JADESNOW
2026-05-28 ⋅ neso.re ⋅ neso
ClickFix x HijackLoader: Dissecting a Live Stealer Campaign - Part 2
HijackLoader
2026-05-28 ⋅ eSentire ⋅ eSentire
Nimbus RAT: How Threat Actors Are Abusing Microsoft Teams and Google Drive to Deploy a Java RAT
2026-05-28 ⋅ ESET Research ⋅ ESET Research
ESET APT Activity Report Q4 2025–Q1 2026
WAVESHAPER BirdCall BLINDINGCAN RokRAT Rook Tiger RAT
2026-05-28 ⋅ Mohammad Kazem Hassan Nejad
GREYVIBE: A Russia-nexus group leveraging AI across state-aligned operations
LegionRelay PhantomRelay