Click here to download all references as Bib-File.
2022-02-02 ⋅ IBM ⋅ TrickBot Gang Uses Template-Based Metaprogramming in Bazar Malware BazarBackdoor TrickBot |
2021-12-07 ⋅ sysdig ⋅ Threat news: TeamTNT stealing credentials using EC2 Instance Metadata TeamTNT |
2021-11-16 ⋅ META ⋅ Taking Action Against Hackers in Pakistan and Syria SideCopy |
2021-11-01 ⋅ META ⋅ October 2021 Coordinated Inauthentic Behavior Report |
2021-09-02 ⋅ nviso ⋅ Anatomy and Disruption of Metasploit Shellcode |
2021-09-02 ⋅ AhnLab ⋅ Attacks using metasploit meterpreter Appleseed Meterpreter |
2021-08-06 ⋅ metabaseq ⋅ Inside DarkSide, the ransomware that attacked Colonial Pipeline DarkSide |
2021-06-02 ⋅ Trend Micro ⋅ Taking Advantage of PE Metadata, or How To Complete Your Favorite Threat Actor’s Sample Collection HyperSSL |
2021-06-02 ⋅ Trend Micro ⋅ Taking Advantage of PE Metadata,or How To Complete your Favorite ThreatActor’s Sample Collection (Paper) HyperSSL |
2021-03-21 ⋅ YouTube (dist67) ⋅ Finding Metasploit & Cobalt Strike URLs Cobalt Strike |
2021-03-11 ⋅ Cofense ⋅ AutoHotKey Leveraged by Metamorfo/Mekotio Banking Trojan Metamorfo |
2021-03-02 ⋅ Metabase Q ⋅ Ploutus is back, targeting Itautec ATMs in Latin America Ploutus ATM |
2020-10-25 ⋅ MetadataBin Ransomware MetadataBin |
2020-06-25 ⋅ Malwarebytes ⋅ Web skimmer hides within EXIF metadata, exfiltrates credit cards via image files magecart |
2020-06-04 ⋅ Bitdefender ⋅ Loading DLLs for illicit profit. A story about a Metamorfo distribution campaign Metamorfo |
2020-03-04 ⋅ MetaSwan's Lab ⋅ Kimsuky group's resume impersonation malware Kimsuky |
2020-02-26 ⋅ MetaSwan's Lab ⋅ Lazarus group's Brambul worm of the former Wannacry - 1 Brambul WannaCryptor |
2020-02-26 ⋅ MetaSwan's Lab ⋅ Lazarus group's Brambul worm of the former Wannacry - 2 Brambul |
2020-02-11 ⋅ Github (jeFF0Falltrades) ⋅ Metamorfo (aka Casbaneiro) Metamorfo Unidentified 072 (Metamorfo Loader) |
2019-07-16 ⋅ enSilo ⋅ The Avast Abuser: Metamorfo Banking Malware Hides By Abusing Avast Executable Metamorfo |