Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-09-15 ⋅ Microsoft ⋅ Microsoft 365 Defender Threat Intelligence Team, Microsoft Threat Intelligence Center (MSTIC)
Analyzing attacks that exploit the CVE-2021-40444 MSHTML vulnerability
Cobalt Strike
2021-09-14 ⋅ NK News ⋅ Ethan Jewell, Jeongmin Kim
North Korea-linked account poses as KBS scriptwriter to dupe DPRK watchers
2021-09-14 ⋅ CrowdStrike ⋅ CrowdStrike Intelligence Team
Big Game Hunting TTPs Continue to Shift After DarkSide Pipeline Attack
BlackMatter DarkSide REvil Avaddon BlackMatter Clop Conti CryptoLocker DarkSide DoppelPaymer Hades REvil
2021-09-14 ⋅ Fortinet ⋅ John Simmons
More ProxyShell? Web Shells Lead to ZeroLogon and Application Impersonation Attacks
2021-09-13 ⋅ Malwarebytes ⋅ Jérôme Segura
The many tentacles of Magecart Group 8
magecart
2021-09-13 ⋅ Imperva ⋅ Daniel Kerman
Attackers exploit CVE-2021-26084 for XMRig crypto mining on affected Confluence servers
2021-09-10 ⋅ S2W LAB Inc. ⋅ S2W TALON
Groove x RAMP : The relation between Groove, Babuk, Payload.bin, RAMP, and BlackMatter
Babuk BlackMatter Babuk BlackMatter
2021-09-10 ⋅ Netskope ⋅ Gustavo Palazolo
Hive Ransomware: Actively Targeting Hospitals
Hive
2021-09-10 ⋅ The Record ⋅ Catalin Cimpanu
Indonesian intelligence agency compromised in suspected Chinese hack
PlugX
2021-09-09 ⋅ Blackberry ⋅ The BlackBerry Research & Intelligence Team
Threat Thursday: Get Your Paws Off My Data, Raccoon Infostealer
Raccoon
2021-09-09 ⋅ Medium s2wlab ⋅ S2W TALON
Case Analysis of Suncrypt Ransomware Negotiation and Bitcoin Transaction
SunCrypt
2021-09-09 ⋅ Cyber-Anubis ⋅ Nidal Fikri
Hancitor Loader | RE & Config Extraction
Hancitor
2021-09-09 ⋅ Recorded Future ⋅ Insikt Group
Dark Covenant: Connections Between the Russian State and Criminal Actors
BlackEnergy EternalPetya Gameover P2P Zeus
2021-09-09 ⋅ Symantec ⋅ Threat Hunter Team
Grayfly: Chinese Threat Actor Uses Newly-discovered Sidewalk Malware
CROSSWALK MimiKatz SideWalk
2021-09-09 ⋅ Lacework Labs ⋅ Lacework Labs
PYSA Ransomware Gang adds Linux Support
Mespinoza
2021-09-09 ⋅ IBM ⋅ Megan Roddie
LockBit 2.0: Ransomware Attacks Surge After Successful Affiliate Recruitment
LockBit
2021-09-08 ⋅ SentinelOne ⋅ Igor Tsemakhovich, Juan Andrés Guerrero-Saade
Egomaniac: An Unscrupulous Turkish-Nexus Threat Actor
Ahtapot Rad Turkojan
2021-09-08 ⋅ lacework ⋅ Lacework Labs
Muhstik Takes Aim at Confluence CVE 2021-26084
Tsunami
2021-09-08 ⋅ Medium s2wlab ⋅ S2W TALON
Groove’s thoughts on Blackmatter, Babuk, and cheese shortages in the Netherlands
Babuk BlackMatter Babuk BlackMatter
2021-09-08 ⋅ US Department of Justice ⋅ US Department of Justice
Ukrainian Cyber Criminal Extradited For Decrypting The Credentials Of Thousands Of Computers Across The World And Selling Them On A Dark Web Website (Glib Oleksandr Ivanov-Tolpintsev)