Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-05-04 ⋅ HP ⋅ Patrick Schläpfer
Tips for Automating IOC Extraction from GootLoader, a Changing JavaScript Malware
GootLoader
2022-04-12 ⋅ HP ⋅ Patrick Schläpfer
Malware Campaigns Targeting African Banking Sector
CloudEyE Remcos
2022-03-30 ⋅ Twitter (@hpsecurity) ⋅ HP Wolf Security
Tweet on recent Mekotio Banker campaign
Mekotio
2022-02-09 ⋅ Flashpoint ⋅ Flashpoint
Russia Seizes Ferum, Sky-Fraud, UAS, and Trump’s Dumps—and Signals More Takedowns to Come
2022-02-08 ⋅ HP ⋅ Patrick Schläpfer
Attackers Disguise RedLine Stealer as a Windows 11 Upgrade
RedLine Stealer
2022-01-14 ⋅ HP ⋅ Patrick Schläpfer
How Attackers Use XLL Malware to Infect Systems
2021-12-09 ⋅ HP ⋅ Patrick Schläpfer
Emotet’s Return: What’s Different?
Emotet
2021-11-23 ⋅ HP ⋅ Patrick Schläpfer
RATDispenser: Stealthy JavaScript Loader Dispensing RATs into the Wild
AdWind Ratty STRRAT CloudEyE Formbook Houdini Panda Stealer Remcos
2021-11-16 ⋅ Flashpoint ⋅ Flashpoint
RAMP Ransomware’s Apparent Overture to Chinese Threat Actors
2021-10-18 ⋅ Flashpoint ⋅ Flashpoint
REvil Disappears Again: ‘Something Is Rotten in the State of Ransomware’
REvil REvil
2021-10-01 ⋅ HP ⋅ HP Wolf Security
Threat Insights Report Q3 - 2021
STRRAT CloudEyE NetWire RC Remcos TrickBot Vjw0rm
2021-09-29 ⋅ Flashpoint ⋅ Flashpoint
Russian hacker Q&A: An Interview With REvil-Affiliated Ransomware Contractor
REvil REvil
2021-09-28 ⋅ Flashpoint ⋅ Flashpoint
REvil’s “Cryptobackdoor” Con: Ransomware Group’s Tactics Roil Affiliates, Sparking a Fallout
REvil
2021-09-19 ⋅ HP ⋅ Patrick Schläpfer
MirrorBlast and TA505: Examining Similarities in Tactics, Techniques and Procedures
MirrorBlast
2021-08-10 ⋅ Flashpoint ⋅ Flashpoint
REvil Master Key for Kaseya Attack Posted to XSS
REvil
2021-07-30 ⋅ HP ⋅ Patrick Schläpfer
Detecting TA551 domains
Valak Dridex IcedID ISFB QakBot
2021-07-27 ⋅ Flashpoint ⋅ Flashpoint
Chatter Indicates BlackMatter as REvil Successor
REvil
2021-07-09 ⋅ Seqrite ⋅ Chaitanya Haritash, Nihar Deshpande, Shayak Tarafdar
Seqrite uncovers second wave of Operation SideCopy targeting Indian critical infrastructure PSUs
NjRAT ReverseRAT
2021-06-28 ⋅ HP ⋅ Patrick Schläpfer
Snake Keylogger’s Many Skins: Analysing Code Reuse Among Infostealers
404 Keylogger Phoenix Keylogger
2021-06-15 ⋅ Nextron Systems ⋅ Nextron Systems
Use YARA math Module Extension in THOR TechPreview and THOR Lite