Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-06-01 ⋅ SentinelOne ⋅ Juan Andrés Guerrero-Saade
NobleBaron | New Poisoned Installers Could Be Used In Supply Chain Attacks
Cobalt Strike
2021-06-01 ⋅ Malwarebytes ⋅ Hossein Jazi
Kimsuky APT continues to target South Korean government using AppleSeed backdoor
Appleseed
2021-06-01 ⋅ Medium mergene ⋅ Mehmet Ergene
Detecting Initial Access: HTML Smuggling and ISO Images — Part 2
2021-06-01 ⋅ Medium mergene ⋅ Mehmet Ergene
Detecting Initial Access: HTML Smuggling and ISO Images — Part 1
2021-06-01 ⋅ Bitdefender ⋅ Alin Mihai Barbatei, Oana Asoltanei, Silviu Stahie
Threat Actors Use Mockups of Popular Apps to Spread Teabot and Flubot Malware on Android
Anatsa FluBot
2021-06-01 ⋅ wordfence ⋅ Ram Gall
Critical 0-day in Fancy Product Designer Under Active Attack
2021-06-01 ⋅ Bleeping Computer ⋅ Sergiu Gatlan
Critical WordPress plugin zero-day under active exploitation
2021-05-31 ⋅ Wired ⋅ Andy Greenberg
Hacker Lexicon: What Is a Supply Chain Attack?
EternalPetya SUNBURST
2021-05-31 ⋅ DataBreaches.net ⋅ Dissent
Babuk re-organizes as Payload Bin, offers its first leak
Babuk HelloKitty
2021-05-29 ⋅ Twitter (@elisalem9) ⋅ Eli Salem
Tweet on obfuscation mechanism and extraction procedure of COBALTSTRIKE beacon module used by NOBELIUM/UNC2452
Cobalt Strike
2021-05-28 ⋅ CISA ⋅ US-CERT
Malware Analysis Report (AR21-148A): Cobalt Strike Beacon
Cobalt Strike
2021-05-28 ⋅ Twitter (@Jacob_Pimental) ⋅ Jacob Pimental
Tweet on REvil ver 2.07
REvil
2021-05-28 ⋅ Trend Micro ⋅ Mina Nalim
DarkSide on Linux: Virtual Machines Targeted
DarkSide
2021-05-27 ⋅ xorhex blog ⋅ Twitter (@xorhex)
Mustang Panda PlugX - Reused Mutex and Folder Found in the Extracted Config
PlugX
2021-05-27 ⋅ JPCERT/CC ⋅ Yuma Masubuchi
Attacks Embedding XMRig on Compromised Servers
2021-05-27 ⋅ FireEye ⋅ Dan Perez, Emiel Haeghebaert, Greg Wood, Sarah Jones, Stephen Eckels
Re-Checking Your Pulse: Updates on Chinese APT Actors Compromising Pulse Secure VPN Devices
UNC2630 UNC2717
2021-05-27 ⋅ Microsoft ⋅ Tom Burt
Another Nobelium Cyberattack
2021-05-27 ⋅ 360 netlab ⋅ Alex.Turing, Chai Linyuan, Jinye
Analysis report of the Facefish rootkit
Facefish
2021-05-26 ⋅ DeepInstinct ⋅ Ron Ben Yizhak
A Deep Dive into Packing Software CryptOne
Cobalt Strike Dridex Emotet Gozi ISFB Mailto QakBot SmokeLoader WastedLocker Zloader
2021-05-26 ⋅ Facebook ⋅ Facebook
Threat Report: The State of Influence Operations 2017-2020