Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-07-02 ⋅ Twitter (@VK_intel) ⋅ Vitali Kremez
Tweet on Revil ransomware analysis used in Kaseya attack
REvil
2021-07-02 ⋅ Github (fwosar) ⋅ Fabian Wosar
REvil configuration dump used in Kaseya attack
REvil
2021-07-02 ⋅ Twitter (@SyscallE) ⋅ SeAccessCheck
Tweet on Revil dropper used in Kaseya attack
REvil
2021-07-02 ⋅ ⋅ AhnLab ⋅ AhnLab ASEC Analysis Team
Dissemination of malicious word documents for 'Korean Political Science and Diplomacy' and 'Biography of Policy Advisor' (kimsuky)
2021-07-02 ⋅ Anchored Narratives on Threat Intelligence and Geopolitics ⋅ RJM
Geopolitical nation-state threat actor overview June 2021
2021-07-02 ⋅ The Record ⋅ Catalin Cimpanu
REvil ransomware gang executes supply chain attack via malicious Kaseya update
REvil
2021-07-02 ⋅ The Record ⋅ Catalin Cimpanu
TrickBot: New attacks see the botnet deploy new banking module, new ransomware
TrickBot
2021-07-01 ⋅ Avast Decoded ⋅ Igor Morgenstern, Jan Vojtěšek, Luigino Camastra
Backdoored Client from Mongolian CA MonPass
Cobalt Strike Earth Lusca
2021-07-01 ⋅ Avast Decoded ⋅ Igor Morgenstern, Jan Vojtěšek, Luigino Camastra
Backdoored Client from Mongolian CA MonPass
Cobalt Strike FishMaster
2021-07-01 ⋅ Check Point ⋅ Check Point Research
IndigoZebra APT continues to attack Central Asia with evolving tools
BoxCaon xCaon IndigoZebra
2021-07-01 ⋅ Anheng Threat Intelligence Center ⋅ Anheng Threat Intelligence Center
Suspected HADES organization launched an attack on Ukraine with military themes
2021-07-01 ⋅ Proofpoint ⋅ Bryan Campbell, Selena Larson
Malware Masquerades as Privacy Tool
2021-07-01 ⋅ Dr.Web ⋅ Dr.Web
Android trojans steal Facebook users’ logins and passwords
2021-07-01 ⋅ The Record ⋅ Catalin Cimpanu
Mongolian certificate authority hacked eight times, compromised with malware
Cobalt Strike
2021-07-01 ⋅ BleepingComputer ⋅ Ionut Ilascu
Babuk ransomware is back, uses new version on corporate networks
Babuk
2021-06-30 ⋅ BleepingComputer ⋅ Lawrence Abrams
Leaked Babuk Locker ransomware builder used in new attacks
Babuk
2021-06-29 ⋅ Yoroi ⋅ Yoroi
The "WayBack” Campaign: a Large Scale Operation Hiding in Plain Sight
2021-06-29 ⋅ Twitter (@IntezerLabs) ⋅ Intezer
Tweet on unknown elf backdoor based on an open source remote shell named "amcsh"
BioSet
2021-06-29 ⋅ Facebook ⋅ Jessica Romero
Combating E-Commerce Scams and Account Takeover Attacks
2021-06-29 ⋅ Accenture ⋅ Accenture Security
HADES ransomware operators continue attacks
Cobalt Strike Hades MimiKatz