Click here to download all references as Bib-File.•
2023-07-11
⋅
AhnLab
⋅
Analysis of the Rekoobe Backdoor Being Used In Attacks Against Linux Systems in Korea Rekoobe |
2023-07-03
⋅
AhnLab
⋅
Crysis Threat Actor Installing Venus Ransomware Through RDP Dharma |
2023-06-28
⋅
⋅
AhnLab
⋅
Kimsuky Attack Group Abusing Chrome Remote Desktop Appleseed |
2023-06-20
⋅
AhnLab
⋅
Tsunami DDoS Malware Distributed to Linux SSH Servers PerlBot Tsunami |
2023-06-08
⋅
⋅
AhnLab
⋅
Lazarus Group exploiting vulnerabilities in domestic financial security solutions LazarDoor LazarLoader |
2023-05-23
⋅
AhnLab
⋅
DarkCloud Infostealer Being Distributed via Spam Emails DarkCloud Stealer |
2023-05-22
⋅
AhnLab
⋅
Kimsuky Group Using Meterpreter to Attack Web Servers Kimsuky Meterpreter |
2023-05-18
⋅
AhnLab
⋅
SparkRAT Being Distributed Within a Korean VPN Installer SparkRAT |
2023-05-15
⋅
AhnLab
⋅
LokiLocker, a Ransomware Similar to BlackBit Being Distributed in Korea LokiLocker |
2023-05-03
⋅
AhnLab
⋅
RecordBreaker Stealer Distributed via Hacked YouTube Accounts RecordBreaker |
2023-04-26
⋅
AhnLab
⋅
RokRAT Malware Distributed Through LNK Files (*.lnk): RedEyes (ScarCruft) RokRAT |
2023-04-17
⋅
AhnLab
⋅
8220 Gang Uses Log4Shell Vulnerability to Install CoinMiner Water Sigbin |
2023-04-17
⋅
AhnLab
⋅
Trigona Ransomware Attacking MS-SQL Servers Trigona |
2023-03-23
⋅
⋅
AhnLab
⋅
Kimsuky group distributes malware disguised as a profile file (GitHub) |
2023-03-17
⋅
AhnLab
⋅
ShellBot Malware Being Distributed to Linux SSH Servers PerlBot |
2023-03-08
⋅
⋅
AhnLab
⋅
CHM malware (Kimsuky) disguised questionnaires related to North Korea |
2023-03-08
⋅
AhnLab
⋅
GlobeImposter Ransomware Being Distributed with MedusaLocker via RDP GlobeImposter MedusaLocker |
2023-02-15
⋅
AhnLab
⋅
Paradise Ransomware Distributed Through AweSun Vulnerability Exploitation Paradise |
2023-02-15
⋅
⋅
AhnLab
⋅
Distributed Malware Exploiting Vulnerable Innorix: Andariel Andardoor |
2023-02-14
⋅
⋅
AhnLab
⋅
Hangeul (HWP) malware using steganography: RedEyes (ScarCruft) |