Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-07-27 ⋅ Bitdefender ⋅ Martin Zugec, Victor Vrabie
Deep dive into a FIN8 attack – A forensic investigation
2021-07-27 ⋅ Trend Micro ⋅ Alfredo Oliveira, David Fiser
Threat Actors Exploit Misconfigured Apache Hadoop YARN
Kinsing
2021-07-27 ⋅ Flashpoint ⋅ Flashpoint
Chatter Indicates BlackMatter as REvil Successor
REvil
2021-07-27 ⋅ Youtube (SANS Institute) ⋅ John Hammond, Katie Nickels
SANS Threat Analysis Rundown - Kaseya VSA attack
REvil
2021-07-27 ⋅ Palo Alto Networks Unit 42 ⋅ Alex Hinchliffe, Mike Harbison
THOR: Previously Unseen PlugX Variant Deployed During Microsoft Exchange Server Attacks by PKPLUG Group
PlugX
2021-07-27 ⋅ The Record ⋅ Catalin Cimpanu
BlackMatter ransomware targets companies with revenue of $100 million and more
2021-07-27 ⋅ Recorded Future ⋅ Insikt Group®
BlackMatter Ransomware Emerges As Successor to DarkSide, REvil
DarkSide LockBit REvil
2021-07-27 ⋅ Bleeping Computer ⋅ Sergiu Gatlan
UC San Diego Health discloses data breach after phishing attack
2021-07-27 ⋅ Check Point ⋅ Alexey Bukhteyev, Raman Ladutska
Time-proven tricks in a new environment: the macOS evolution of Formbook
Xloader
2021-07-27 ⋅ ⋅ 360 Threat Intelligence Center ⋅ Advanced Threat Institute
Summary of Kimsuky's secret stealing activities in the first half of 2021
2021-07-27 ⋅ Cleafy ⋅ Cleafy
Oscorp evolves into UBEL: an advanced Android malware spreading across the globe
Oscorp
2021-07-27 ⋅ Blackberry ⋅ BlackBerry Research & Intelligence Team
Old Dogs New Tricks: Attackers Adopt Exotic Programming Languages
elf.wellmess ElectroRAT BazarNimrod Buer Cobalt Strike Remcos Snake TeleBot WellMess Zebrocy
2021-07-27 ⋅ SYGNIA ⋅ Amitai Ben Shushan Ehrlich, Amnon Kushnir, Arie Zilberstein, Asaf Eitani, Gil Biton, Itay Shohat, Martin Korman, Noam Lifshitz, Sygnia Incident Response Team
TG1021: "Praying Mantis" Dissecting an Advanced Memory-Resident Attack
2021-07-26 ⋅ CheckMal ⋅ CheckMal
WhiteBlackGroup Ransomware (.encrpt3d)
WhiteBlackCrypt
2021-07-26 ⋅ vmware ⋅ Pavankumar Chaudhari, Quentin Fois
Hunting IcedID and unpacking automation with Qiling
IcedID
2021-07-26 ⋅ SentinelOne ⋅ Phil Stokes
Detecting XLoader | A macOS ‘Malware-as-a-Service’ Info Stealer and Keylogger
Xloader
2021-07-25 ⋅ Youtube (AhmedS Kasmani) ⋅ AhmedS Kasmani
Analysis of Malware from Kaseya/Revil Supply Chain attack.
REvil
2021-07-24 ⋅ Twitter (@MsftSecIntel) ⋅ Microsoft Security Intelligence
Tweet on attackers increasingly using HTML smuggling in phishing and other email campaigns to deliver Casbaneiro
Metamorfo
2021-07-24 ⋅ 0ffset Blog ⋅ Daniel Bunce
Quack Quack: Analysing Qakbot’s Browser Hooking Module – Part 1
QakBot
2021-07-23 ⋅ Github (Lastline-Inc) ⋅ Pavankumar Chaudhari, Quentin Fois
YARA rules, IOCs and Scripts for extracting IcedID C2s
IcedID