Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-01-17 ⋅ Github (Dump-GUY) ⋅ Jiří Vinopal
Debugging MBR - IDA + Bochs Emulator (CTF example)
WhisperGate
2022-01-17 ⋅ Cado Security ⋅ Cado Security
Resources for DFIR Professionals Responding to WhisperGate Malware
WhisperGate
2022-01-16 ⋅ Github (wgpsec) ⋅ wgpsec
CreateHiddenAccount
CreateHiddenAccount
2022-01-15 ⋅ Microsoft ⋅ Tom Burt
Malware attacks targeting Ukraine government (DEV-0586)
WhisperGate
2022-01-15 ⋅ Huntress Labs ⋅ Team Huntress
Threat Advisory: VMware Horizon Servers Actively Being Hit With Cobalt Strike (by DEV-0401)
Cobalt Strike
2022-01-15 ⋅ Github (eset) ⋅ ESET Research
Donot Team — Indicators of Compromise
2022-01-15 ⋅ Atomic Matryoshka ⋅ z3r0day_504
Malware Headliners: Qakbot
QakBot
2022-01-15 ⋅ Microsoft ⋅ Microsoft, Microsoft 365 Defender Threat Intelligence Team, Microsoft Detection and Response Team (DART), Microsoft Digital Security Unit (DSU), Microsoft Security Intelligence
Destructive malware targeting Ukrainian organizations (DEV-0586)
WhisperGate DEV-0586
2022-01-14 ⋅ Trend Micro ⋅ Bren Matthew Ebriega
Ransom.Win32.WHITERABBIT.YACAET
WhiteRabbit
2022-01-14 ⋅ Mandiant ⋅ Bryan Turner, Daniel Smith, Matthew McWhirt, Omar Toor
Proactive Preparation and Hardening to Protect Against Destructive Attacks
2022-01-14 ⋅ Twitter (@billyleonard) ⋅ Billy Leonard, Google Threat Analysis Group
Tweet on APT28 credential phishing campaigns targeting Ukraine
2022-01-14 ⋅ RiskIQ ⋅ Jordan Herman
RiskIQ: Unique SSL Certificates and JARM Hash Connected to Emotet and Dridex C2 Servers
Dridex Emotet
2022-01-14 ⋅ HP ⋅ Patrick Schläpfer
How Attackers Use XLL Malware to Infect Systems
2022-01-13 ⋅ F5 ⋅ Dor Nizar, Roy Moshailov
FluBot’s Authors Employ Creative and Sophisticated Techniques to Achieve Their Goals in Version 5.0 and Beyond
FluBot
2022-01-13 ⋅ Blackberry ⋅ The BlackBerry Research & Intelligence Team
Threat Thursday: Jupyter Infostealer is a Master of Disguise
solarmarker
2022-01-12 ⋅ BleepingComputer ⋅ Ionut Ilascu
Hackers take over diplomat's email, target Russian deputy minister
Konni
2022-01-12 ⋅ Cyber And Ramen blog ⋅ Mike R
Analysis of njRAT PowerPoint Macros
NjRAT
2022-01-12 ⋅ LIFARS
Newly Found Malware Threatens IoT Devices
BotenaGo
2022-01-12 ⋅ Cisco ⋅ Chetan Raghuprasad, Vanja Svajcer
Nanocore, Netwire and AsyncRAT spreading campaign uses public cloud infrastructure
AsyncRAT Nanocore RAT NetWire RC
2022-01-12 ⋅ Sentinel LABS ⋅ Amitai Ben Shushan Ehrlich
Wading Through Muddy Waters | Recent Activity of an Iranian State-Sponsored Threat Actor
PowGoop