Click here to download all references as Bib-File.•
| 2026-01-19
⋅
kmsec
⋅
npm package bigmathix and the BigSquatRat campaign behind it |
| 2026-01-16
⋅
WithSecure
⋅
To the past and beyond: Andariel’s latest arsenal and cyberattacks GopherRAT JelusRAT PetitPotato |
| 2026-01-15
⋅
Acronis
⋅
LOTUSLITE: Targeted espionage leveraging geopolitical themes LOTUSLITE |
| 2026-01-15
⋅
ANALYST1
⋅
Infrastructure in the Shadows: How Two Leaks Unmasked the Criminal Network of Yalishanda aka Media Land, and BlackBasta Black Basta Black Basta |
| 2026-01-15
⋅
Expel
⋅
Planned failure: Gootloader’s malformed ZIP actually works perfectly GootLoader |
| 2026-01-14
⋅
DomainTools
⋅
The Knownsec Leak: Yet Another Leak of China's Contractor-Driven Cyber-Espionage Ecosystem |
| 2026-01-14
⋅
Nextron Systems
⋅
Free Converter Software – Convert Any System from Clean to Infected in Seconds |
| 2026-01-14
⋅
Dark Web Informer
⋅
Almaex Iranian Cryptocurrency Exchange Breach Allegedly Exposes Over 50,000 User Records LulzIntel |
| 2026-01-14
⋅
Hunt.io
⋅
Inside China’s Hosting Ecosystem: 18,000+ Malware C2 Servers Mapped Across Major ISPs |
| 2026-01-14
⋅
Trellix
⋅
Hiding in Plain Sight: Deconstructing the Multi-Actor DLL Sideloading Campaign abusing ahost.exe DCRat |
| 2026-01-13
⋅
Medium @0xOZ
⋅
How to Get Scammed (by DPRK Hackers) JADESNOW |
| 2026-01-13
⋅
LinkedIn (Majed Ali)
⋅
Dissecting a Multi-Stage Malware Campaign: How Cracked Software's Delivers ViperSoftX ViperSoftX |
| 2026-01-12
⋅
Securonix
⋅
SHADOW#REACTOR – Text-Only Staging, .NET Reactor, and In-Memory Remcos RAT Deployment Remcos |
| 2026-01-12
⋅
⋅
Cert-UA
⋅
"Unreliable Fund": targeted cyberattacks UAC-0190 against SOU using PLUGGYAPE (CERT-UA#19092) PLUGGYAPE Void Blizzard |
| 2026-01-09
⋅
JSAC 2026
⋅
The Return of Old Forces: Revealing New Campaigns Connected to A Missing Cyber Mercenary Firm Linodas Brute Ratel C4 Cobalt Strike DinodasRAT HyperBro JuicyPotato MimiKatz Reshell VShell |
| 2026-01-09
⋅
flare
⋅
New Threat Actor Group PayTool Targets Canadians with Traffic Scams PayTool |
| 2026-01-09
⋅
The Hacker News
⋅
Russian APT28 Runs Credential-Stealing Campaign Targeting Energy and Policy Organizations |
| 2026-01-08
⋅
FBI
⋅
North Korean Kimsuky Actors Leverage Malicious QR Codes in Spearphishing Campaigns Targeting U.S. Entities |
| 2026-01-07
⋅
Group-IB
⋅
Ghost Tapped: Tracking the Rise of Chinese Tap-to-pay Android Malware |
| 2026-01-07
⋅
Dark Web Informer
⋅
Singapore Traditional Chinese Medicine Clinic Kin Teck Tong Allegedly Suffers Data Breach Exposing 150,000 Patient Records LulzIntel |