Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-05-25 ⋅ lacework ⋅ Lacework Labs
Taking TeamTNT’s Docker Images Offline
2021-05-21 ⋅ ⋅ LAC ⋅ Yoshihiro Ishikawa
Targeted attack by 'Cobalt Strike loader' that exploits Microsoft's digital signature-Attacker group APT41
Cobalt Strike DUSTPAN
2021-05-21 ⋅ blackarrow ⋅ Pablo Ambite
Leveraging Microsoft Teams to persist and cover up Cobalt Strike traffic
Cobalt Strike
2021-05-20 ⋅ lacework ⋅ Chris Hall, Jared Stroud, Tom Hegel
8220 Gangs Recent use of Custom Miner and Botnet
2021-05-18 ⋅ Blackberry ⋅ BlackBerry Threat Research and Intelligence Team
Strong ARMing with MacOS: Adventures in Cross-Platform Emulation
2021-05-18 ⋅ Digital Shadows ⋅ Photon Research Team
Examining Russian-language Cybercriminal Marketplaces
2021-05-13 ⋅ Blackberry ⋅ BlackBerry Threat Research and Intelligence Team
Threat Thursday: SombRAT — Always Leave Yourself a Backdoor
SombRAT
2021-05-12 ⋅ NortonLifeLock ⋅ Daniel Kats, David Zhuang
Encrypted Chat Apps Doubling as Illegal Marketplaces
2021-05-07 ⋅ Bleeping Computer ⋅ Lawrence Abrams
Data leak marketplaces aim to take over the extortion economy
Babuk Maze
2021-05-06 ⋅ Black Hat ⋅ Anurag Khanna, Thirumalai Natarajan Muthiah
Threat Hunting in Active Directory Environment
2021-05-06 ⋅ Black Hat ⋅ Christian Doerr, Tsuyoshi Taniguchi
How Did the Adversaries Abusing Bitcoin Blockchain Evade Our Takeover
Cerber Pony
2021-05-06 ⋅ Blackberry ⋅ BlackBerry Research and Intelligence team
Threat Thursday: Dr. REvil Ransomware Strikes Again, Employs Double Extortion Tactics
REvil
2021-05-04 ⋅ Lacework Labs ⋅ Chris Hall
Cpuminer & Friends
2021-04-22 ⋅ Lacework Labs
Sysrv-Hello Expands Infrastructure
Sysrv-hello
2021-04-22 ⋅ lacework ⋅ Chris Hall, Jared Stroud
Sysrv-Hello Expands Infrastructure
Sysrv-hello
2021-04-13 ⋅ lacework ⋅ Tom Hegel
Carbine Loader Cryptojacking Campaign
2021-03-29 ⋅ VMWare Carbon Black ⋅ Giovanni Vigna, Jason Zhang, Oleg Boyarchuk
Dridex Reloaded: Analysis of a New Dridex Campaign
Dridex
2021-03-25 ⋅ VMWare Carbon Black ⋅ Baibhav Singh, Giovanni Vigna, Threat Analysis Unit
Memory Forensics for Virtualized Hosts
2021-03-24 ⋅ SophosLabs Uncut ⋅ Mark Loman
Black Kingdom ransomware begins appearing on Exchange servers
2021-03-23 ⋅ Sophos ⋅ Mark Loman
Black Kingdom ransomware begins appearing on Exchange servers
BlackKingdom Ransomware