Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-11-02 ⋅ Blackberry ⋅ Blackberry Research
RomCom Threat Actor Abuses KeePass and SolarWinds to Target Ukraine and Potentially the United Kingdom
ROMCOM RAT RomCom
2022-11-02 ⋅ Twitter (@_CPResearch_) ⋅ Checkpoint Research
Tweet on Azov Wiper
Azov Wiper
2022-11-02 ⋅ NOZOMI Network Labs ⋅ Nozomi Networks Labs
Could Threat Actors Be Downgrading Their Malware to Evade Detection?
Bashlite
2022-11-01 ⋅ BlackPoint ⋅ BlackPoint
Ratting Out Arechclient2
SectopRAT
2022-11-01 ⋅ NCSC UK ⋅ NCSC UK
NCSC Annual Review 2022
2022-10-31 ⋅ Kaspersky Labs ⋅ Suguru Ishimaru
APT10: Tracking down LODEINFO 2022, part II
LODEINFO
2022-10-31 ⋅ Kaspersky Labs ⋅ Suguru Ishimaru
APT10: Tracking down LODEINFO 2022, part I
LODEINFO
2022-10-31 ⋅ Twitter (@CryptoInsane) ⋅ CryptoInsane
Tweet about Yanluowang Leaks
Yanluowang
2022-10-31 ⋅ Cynet ⋅ Max Malyutin
Orion Threat Alert: Qakbot TTPs Arsenal and the Black Basta Ransomware
Black Basta Cobalt Strike QakBot
2022-10-31 ⋅ The Record ⋅ Alexander Martin
Mondelez and Zurich reach settlement in NotPetya cyberattack insurance suit
EternalPetya
2022-10-31 ⋅ Elastic ⋅ Andrew Pease, Daniel Stepanic, Derek Ditch, Seth Goodwin
ICEDIDs network infrastructure is alive and well
IcedID
2022-10-31 ⋅ Cyber Geeks ⋅ Vlad Pasca
A Technical Analysis of Pegasus for Android - Part 3
Chrysaor
2022-10-31 ⋅ Security homework ⋅ Christophe Rieunier
QakBot CCs prioritization and new record types
QakBot
2022-10-31 ⋅ paloalto Netoworks: Unit42 ⋅ Or Chechik
Banking Trojan Techniques: How Financially Motivated Malware Became Infrastructure
Dridex Kronos TrickBot Zeus
2022-10-28 ⋅ cocomelonc ⋅ cocomelonc
APT techniques: Token theft via UpdateProcThreadAttribute. Simple C++ example.
2022-10-28 ⋅ ThreatFabric ⋅ ThreatFabric
Malware wars: the attack of the droppers
Brunhilda SharkBot Vultur
2022-10-27 ⋅ vmware ⋅ Takahiro Haruyama
Threat Analysis: Active C2 Discovery Using Protocol Emulation Part3 (ShadowPad)
ShadowPad
2022-10-27 ⋅ Bleeping Computer ⋅ Sergiu Gatlan
Microsoft links Raspberry Robin worm to Clop ransomware attacks
Clop Raspberry Robin
2022-10-27 ⋅ Bleeping Computer ⋅ Bill Toulas
Fodcha DDoS botnet reaches 1Tbps in power, injects ransoms in packets
Fodcha
2022-10-26 ⋅ Flashpoint ⋅ Flashpoint
Pro-Kremlin Hacktivist Groups Seeking Impact By Courting Notoriety
RaHDit