Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-07-27 ⋅ Intrusiontruth ⋅ Intrusiontruth
Dear Diary, Today I found a Ghost in the Network
2026-07-27 ⋅ Medium (@billmarczak) ⋅ Bill Marczak
An Angry Spark, or a Triangle in Disguise?
TriangleDB
2026-07-27 ⋅ Netresec ⋅ Erik Hjelmvik
PureLogs, PureRAT and misleading zgRAT
PureLogs Stealer PureRAT zgRAT
2026-07-24 ⋅ JUMPSEC LABS ⋅ JUMPSEC
Inside a DPRK BlueNoroff ClickFix Kit
2026-07-24 ⋅ Daily NK ⋅ Yoon HyeSeong
North Korea busts elite hacking ring inside its own banks
2026-07-24 ⋅ Nokia ⋅ Nokia Deepfield ERT
Jackskid's residential proxy, brought to you by UPnP
Jackskid
2026-07-23 ⋅ NSA ⋅ NSA
NSA and Partners Alert Zimbra Collaboration Suite Users of a Russian State-Supported Phishing Campaign
ZimReaper
2026-07-23 ⋅ Proofpoint ⋅ Greg Lesnewich, Konstantin Klinger, Mark Kelly, Nick Attfield, Saher Naumaan
Operation RoundPress Rolls on with More Half-Click Webmail Zero-Days from TA458
SpyPress
2026-07-23 ⋅ Proofpoint ⋅ Greg Lesnewich, Konstantin Klinger, Mark Kelly, Nick Attfield, Saher Naumaan
TA488 Targets Zimbra Mailservers with Half-Click Exploits
ZimReaper
2026-07-23 ⋅ Group-IB ⋅ Group-IB
JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake
AdaptixC2 reGeorg
2026-07-22 ⋅ Prophet Security ⋅ Joshua Hubner
EtherHiding Malware on macOS: How Attackers Hide C2 on the Blockchain
2026-07-22 ⋅ Huntress Labs ⋅ Michael Tigges
Inside FakeAgent: How a Claude Desktop Malvertising Campaign Hit 29 Organizations with SectopRAT
SectopRAT
2026-07-22 ⋅ bluecyber ⋅ Nguyen Dang Hung
Beyond the Archive: CVE-2025-8088 Stealer Targeting Ukraine
GIFTEDCROOK
2026-07-21 ⋅ kienmanowar Blog ⋅ m4n0w4r, Tran Trung Kien
[QuickNote] Mustang Panda ToneShell (APT S1239) Beacon Shellcode – RE Analysis
TONESHELL
2026-07-21 ⋅ DTEX ⋅ Michael Barnhart
From Payroll to Pyongyang: The DPRK IT Worker Money Trail
2026-07-21 ⋅ ANY.RUN ⋅ ANY.RUN
SnappyClient Analysis
SnappyClient
2026-07-20 ⋅ Medium Ireneusz Tarnowski ⋅ Ireneusz Tarnowski
INC Ransom: Infrastructure Analysis, Operational Tradecraft, and Detection Opportunities
INC INC
2026-07-18 ⋅ Github (muhammadzidane632) ⋅ Zdn2Pwn
Hopeless
Hopeless
2026-07-17 ⋅ OpenSourceMalware ⋅ Jenn Gile
ChainVeil and ViteVenom are DPRK’s PolinRider Campaign
JADESNOW
2026-07-17 ⋅ Elastic ⋅ Daniel Stepanic
New North Korean campaign uses fake coding interviews to steal developer credentials
OtterCookie