Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-01-30 ⋅ Google ⋅ Mandiant
Vishing for Access: Tracking the Expansion of ShinyHunters-Branded SaaS Data Theft
UNC6671
2026-01-28 ⋅ Hunt.io ⋅ Hunt.io
Exposed Open Directory Leaks a Full BYOB Deployment Across Windows, Linux, and macOS
2026-01-22 ⋅ Red Asgard ⋅ Red Asgard Threat Research Team
Hunting Lazarus Part II: When the Dead Drop Moved to the Blockchain
StoatWaffle
2026-01-16 ⋅ Huntress Labs ⋅ Anna Pham, Dani Lopez, Tanner Filip
Dissecting CrashFix: KongTuke's New Toy
KongTuke ModeloRAT
2026-01-14 ⋅ Hunt.io ⋅ Hunt.io
Inside China’s Hosting Ecosystem: 18,000+ Malware C2 Servers Mapped Across Major ISPs
2026-01-11 ⋅ Red Asgard ⋅ Red Asgard
Hunting Lazarus: Inside the Contagious Interview C2 Infrastructure
BeaverTail InvisibleFerret
2026-01-07 ⋅ Huntress Labs ⋅ Anna Pham, Matt Anderson
The Great VM Escape: ESXi Exploitation in the Wild
2026-01-06 ⋅ Trellix ⋅ Aswath A
The Ghost in the Machine: Unmasking CrazyHunter's Stealth Tactics
CrazyHunter
2026-01-06 ⋅ Resecurity ⋅ Resecurity
Cyber Counterintelligence (CCI): When 'Shiny Objects' trick 'Shiny Hunters'
2025-12-18 ⋅ Huntress Labs ⋅ Austin Worline, Lindsey O'Donnell-Welch
A Series of Unfortunate (RMM) Events
2025-12-18 ⋅ Acronis ⋅ Acronis Security
Acronis TRU Alliance {Hunt.io}: Hunting DPRK threats - New Global Lazarus & Kimsuky campaigns
BADCALL POOLRAT Quasar RAT
2025-12-09 ⋅ Huntress Labs ⋅ Jonathan Semon, Stuart Ashenbrenner
AMOS Stealer Exploits AI Trust: Malware Delivered Through ChatGPT and Grok
AMOS
2025-12-08 ⋅ Trend Micro ⋅ Aliakbar Zahravi
AI-Automated Threat Hunting Brings GhostPenguin Out of the Shadows
GhostPenguin
2025-12-03 ⋅ Hunt.io ⋅ Hunt.io
Malicious VSCode Extension Launches Multi-Stage Attack Chain with Anivia Loader and OctoRAT
OctoRAT
2025-11-05 ⋅ Huntress Labs ⋅ Anna Pham
Gootloader Returns: What Goodies Did They Bring?
GootLoader MeowBackConn Supper
2025-10-16 ⋅ Hunt.io ⋅ Hunt.io
Odyssey Stealer and AMOS Campaign Targets macOS Developers Through Fake Tools
AMOS
2025-10-15 ⋅ Symantec ⋅ Threat Hunter Team
Jewelbug: Chinese APT Group Widens Reach to Russia
REF7707
2025-09-22 ⋅ Varonis ⋅ Varonis Threat Labs
What Salesforce Organizations Need to Know About ShinyHunters and Vishing
UNC6040
2025-09-22 ⋅ Medium Mr.AnyThink ⋅ Mr.AnyThink
Hunting For TamperedChef Infostealer
TamperedChef
2025-09-22 ⋅ EclecticIQ ⋅ Arda Büyükkaya
ShinyHunters Calling: Financially Motivated Data Extortion Group Targeting Enterprise Cloud Applications