Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-02-18 ⋅ ⋅ NTT Security ⋅ Hiroki Hada
nccTrojan used in targeted attack by TA428 group against defense and aviation organizations
nccTrojan
2021-02-17 ⋅ Palo Alto Networks Unit 42 ⋅ Nathaniel Quist
WatchDog: Exposing a Cryptojacking Campaign That’s Operated for Two Years
2021-02-17 ⋅ apirro ⋅ Ariel Levy
Detect and prevent the SolarWinds build-time code injection attack
SUNBURST
2021-02-17 ⋅ CrowdStrike ⋅ Falcon OverWatch Team, Strategic Threat Advisory Group
Don’t Get Schooled: Understanding the Threats to the Academic Industry
2021-02-17 ⋅ Security Service of Ukraine ⋅ Security Service of Ukraine
SBU blocks activity of transnational hacking group
Egregor
2021-02-17 ⋅ US Department of Defense ⋅ US Department of Justice
Three North Korean Military Hackers Indicted in Wide-Ranging Scheme to Commit Cyberattacks and Financial Crimes Across the Globe
2021-02-17 ⋅ Netresec ⋅ Erik Hjelmvik
Targeting Process for the SolarWinds Backdoor
SUNBURST
2021-02-17 ⋅ YouTube (The White House) ⋅ Anne Neuberger
Update on Investigaton on Solarwinds supply chain attack from the Deputy National Security Advisor
SUNBURST
2021-02-16 ⋅ Proofpoint ⋅ Proofpoint Threat Research Team
Q4 2020 Threat Report: A Quarterly Analysis of Cybersecurity Trends, Tactics and Themes
Emotet Ryuk NARWHAL SPIDER TA800
2021-02-16 ⋅ FireEye ⋅ Andrew Rector, Matt Bromiley, Robert Wallace
Light in the Dark: Hunting for SUNBURST
SUNBURST
2021-02-16 ⋅ The Wall Street Journal ⋅ Sara Randazzo, Tawnell D. Hobbs
Hacker Claims to Have Stolen Files Belonging to Prominent Law Firm Jones Day
2021-02-16 ⋅ Twitter (@craiu) ⋅ Costin Raiu
Twitter thread on Exaramel Linux backdoor used by Russian Group Sandworm
Exaramel
2021-02-16 ⋅ Accenture ⋅ Alexandrea Berninger
Hard lessons learned: Threat intel takeaways from the community response to Solarigate
SUNBURST TEARDROP
2021-02-16 ⋅ Check Point ⋅ Check Point Research
ApoMacroSploit: Apocalyptical FUD race
BitRAT
2021-02-16 ⋅ SophosLabs Uncut ⋅ Peter Mackenzie, Tilly Travers
What to expect when you’ve been hit with Conti ransomware
Conti
2021-02-16 ⋅ SophosLabs Uncut ⋅ Michael Heller
A Conti ransomware attack day-by-day
Conti
2021-02-15 ⋅ Wired ⋅ Andy Greenberg
France Ties Russia's Sandworm to a Multiyear Hacking Spree
Exaramel Exaramel
2021-02-15 ⋅ cyble ⋅ cybleinc
Ngrok Platform Abused by Hackers to Deliver a New Wave of Phishing Attacks
2021-02-15 ⋅ Twitter (@TheDFIRReport) ⋅ The DFIR Report
Tweet on Qakbot post infection discovery activity
QakBot
2021-02-12 ⋅ Twitter (@ESETresearch) ⋅ ESET Research
A twitter thread on discussing updated attack chain of EVILNUM group and their use PYVIL malware
PyVil