Click here to download all references as Bib-File.•
| 2022-05-07
⋅
⋅
Cert-UA
⋅
Mass distribution of JesterStealer malware using chemical attack themes (CERT-UA#4625) |
| 2022-05-06
⋅
CrowdStrike
⋅
macOS Malware Is More Reality Than Myth: Popular Threats and Challenges in Analysis EvilQuest FlashBack Shlayer XCSSET |
| 2022-05-06
⋅
Elliptic
⋅
OFAC Sanctions Virtual Asset Mixer For the First Time to Combat North Korea’s Lazarus Group |
| 2022-05-06
⋅
CrowdStrike
⋅
macOS Malware Is More Reality Than Myth: Popular Threats and Challenges in Analysis Lador |
| 2022-05-06
⋅
cyble
⋅
Rebranded Babuk Ransomware In Action: DarkAngels Ransomware Performs Targeted Attack Babuk |
| 2022-05-06
⋅
Mitchell's Musings
⋅
Attempted AsyncRAT via .vbs AsyncRAT |
| 2022-05-06
⋅
Twitter (@MsftSecIntel)
⋅
Twitter Thread on initial infeciton of SocGholish/ FAKEUPDATES campaigns lead to BLISTER Loader, CobaltStrike, Lockbit and followed by Hands On Keyboard activity FAKEUPDATES Blister Cobalt Strike LockBit |
| 2022-05-06
⋅
Palo Alto Networks Unit 42
⋅
Cobalt Strike Analysis and Tutorial: CS Metadata Encoding and Decoding Cobalt Strike |
| 2022-05-06
⋅
⋅
LeMagIT
⋅
Ransomware: LockBit 3.0 Starts Using in Cyberattacks LockBit |
| 2022-05-05
⋅
Cisco Talos
⋅
Mustang Panda deploys a new wave of malware targeting Europe Cobalt Strike Meterpreter PlugX PUBLOAD |
| 2022-05-05
⋅
Suspicious Actor
⋅
Studying “Next Generation Malware” - NightHawk’s Attempt At Obfuscate and Sleep Nighthawk |
| 2022-05-05
⋅
DomainTools
⋅
A Sticky Situation Part 1: The Pervasive Nature of Credit Card Skimmers |
| 2022-05-05
⋅
BrightTALK (Mandiant)
⋅
The Sample: Beating the Malware Piñata Jaku |
| 2022-05-05
⋅
Github (muha2xmad)
⋅
Analysis of MS Word to drop Remcos RAT | VBA extraction and analysis | IoCs Remcos |
| 2022-05-05
⋅
Malwarebytes Labs
⋅
Nigerian Tesla: 419 scammer gone malware distributor unmasked Agent Tesla |
| 2022-05-05
⋅
Blackberry
⋅
Threat Thursday: ZingoStealer – The Cost of “Free” ZingoStealer |
| 2022-05-05
⋅
Trend Micro
⋅
NetDooka Framework Distributed via PrivateLoader Malware as Part of Pay-Per-Install Service NetDooka PrivateLoader |
| 2022-05-05
⋅
Intel 471
⋅
Cybercrime loves company: Conti cooperated with other ransomware gangs LockBit Maze RagnarLocker Ryuk |
| 2022-05-05
⋅
NCC Group
⋅
North Korea’s Lazarus: their initial access trade-craft using social media and social engineering LCPDot |
| 2022-05-04
⋅
Cyware
⋅
Chinese Naikon Group Back with New Espionage Attack APT30 Naikon |