Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-06-30 ⋅ Google ⋅ Google Threat Analysis Group, Shane Huntley
Countering hack-for-hire groups
Void Balaur
2022-06-23 ⋅ Google ⋅ Benoit Sevens, Clement Lecigne, Google Threat Analysis Group
Spyware vendor targets users in Italy and Kazakhstan
Hermit
2022-05-19 ⋅ Google ⋅ Christian Resell, Clement Lecigne, Google Threat Analysis Group
Protecting Android users from 0-Day attacks
2022-05-03 ⋅ Google ⋅ Billy Leonard, Google Threat Analysis Group
Update on cyber activity in Eastern Europe
Curious Gorge
2022-03-30 ⋅ Google ⋅ Billy Leonard, Google Threat Analysis Group
Tracking cyber activity in Eastern Europe
2022-03-24 ⋅ Google ⋅ Adam Weidemann, Google Threat Analysis Group
Countering threats from North Korea
2022-03-17 ⋅ Google ⋅ Benoit Sevens, Google Threat Analysis Group, Vladislav Stolyarov
Exposing initial access broker with ties to Conti
BazarBackdoor BumbleBee Cobalt Strike Conti
2022-03-08 ⋅ Twitter (@ShaneHuntley) ⋅ Google Threat Analysis Group, Shane Huntley
Tweet on APT31 phishing campaign targeting high profile Gmail users affiliated with the U.S. government in February
2022-03-07 ⋅ Google ⋅ Google Threat Analysis Group, Shane Huntley
An update on the threat landscape (APT28, UNC1151, MUSTANG PANDA)
2022-03-01 ⋅ Google ⋅ Google Threat Analysis Group, Shane Huntley
TAG Bulletin: Q1 2022
2022-01-14 ⋅ Twitter (@billyleonard) ⋅ Billy Leonard, Google Threat Analysis Group
Tweet on APT28 credential phishing campaigns targeting Ukraine
2021-12-07 ⋅ Google ⋅ Google Threat Analysis Group, Luca Nagy, Shane Huntley
Disrupting the Glupteba operation
Glupteba
2021-12-02 ⋅ Google ⋅ Google Threat Analysis Group, Shane Huntley
TAG Bulletin: Q4 2021
2021-11-24 ⋅ Google ⋅ Google Cybersecurity Action Team, Google Threat Analysis Group
Threat Horizons Cloud Threat Intelligence November 2021. Issue 1
BlackMatter
2021-11-11 ⋅ Google ⋅ Erye Hernandez, Google Threat Analysis Group
Analyzing a watering hole campaign using macOS exploits
CDDS
2021-11-10 ⋅ Twitter (@billyleonard) ⋅ Billy Leonard, Google Threat Analysis Group
Tweet on Rekoobe (used by APT31), being a fork of open source tool called Tiny SHell, used by different actor since at least 2012
Rekoobe
2021-10-29 ⋅ Google ⋅ Google Threat Analysis Group, Shane Huntley
TAG Bulletin: Q3 2021
2021-10-20 ⋅ Google ⋅ Ashley Shen, Google Threat Analysis Group
Phishing campaign targets YouTube creators with cookie theft malware
2021-10-14 ⋅ Google ⋅ Ajax Bash, Google Threat Analysis Group
Countering threats from Iran (APT35)
2021-10-07 ⋅ Twitter (@billyleonard) ⋅ Billy Leonard, Google Threat Analysis Group
Tweet on IOCs related to APT28
2021-09-23 ⋅ Google ⋅ Google Threat Analysis Group, Neel Mehta
Financially motivated actor breaks certificate parsing to avoid detection
OpenSUpdater
2021-07-14 ⋅ Google ⋅ Clement Lecigne, Google Threat Analysis Group, Maddie Stone
How We Protect Users From 0-Day Attacks (CVE-2021-21166, CVE-2021-30551, CVE-2021-33742, CVE-2021-1879)
Cobalt Strike
2021-03-31 ⋅ Google ⋅ Adam Weidemann, Google Threat Analysis Group
Update on campaign targeting security researchers
2021-02-16 ⋅ Google ⋅ Google Threat Analysis Group, Shane Huntley
TAG Bulletin: Q1 2021
2020-11-17 ⋅ Google ⋅ Google Threat Analysis Group, Shane Huntley
TAG Bulletin: Q4 2020
2020-10-16 ⋅ Google ⋅ Google Threat Analysis Group, Shane Huntley
How we're tackling evolving online threats
2020-06-05 ⋅ Google ⋅ Clement Lecigne, Google Threat Analysis Group
Exploits of a TAG analyst chasing in the wild (slides)
2020-06-05 ⋅ ⋅ Google ⋅ Clement Lecigne, Google Threat Analysis Group
Exploits of a TAG analyst chasing in the wild (video)
2017-12-09 ⋅ BlueHat Security Conference ⋅ Billy Leonard, Google Threat Analysis Group
10 Years of Targeted Credential Phishing