Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-10-16 ⋅ OpenSourceMalware ⋅ OpenSourceMalware
GhostAction Copycats PolinRider by Hiding a Stealer in a Fake Font File
GhostAction
2026-10-15 ⋅ ExaTrack ⋅ ExaTrack
APT28 PixyNetLoader update
PixyNetLoader
2026-10-15 ⋅ Infoblox ⋅ Infoblox Threat Intel
Inside Help TDS: Hotejka, Cloudflare Pages and Predictive Detection
DollyWay
2026-10-15 ⋅ ReversingLabs ⋅ Igor Lasic
How RL mapped a Midnight Blizzard-linked campaign from two hashes
ChocoShell CornFlake
2026-10-14 ⋅ Palo Alto Networks Unit 42 ⋅ Daniel Gott, Shawn Westfall
Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
PEERSTITCH UNC5820
2026-10-14 ⋅ Cisco Talos ⋅ Ashley Shen
Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations
UAT-6275
2026-10-14 ⋅ Rogue Authority
A signed “crash handler” that only wakes up under the right name
Zalmoxis
2026-10-13 ⋅ Fox-IT ⋅ Yun Zheng Hu
Releasing the Cobalt Strike Beacon Corpus
Cobalt Strike
2026-10-12 ⋅ Elastic ⋅ Daniel Stepanic, Jia Yu Chan
Auditing the auditor: Unmasking Apex Accelerator
CloudSyncD
2026-10-12 ⋅ Elastic ⋅ Daniel Stepanic, Jia Yu Chan
Auditing the auditor: Unmasking Apex Accelerator
UACMe REF8801
2026-10-12 ⋅ Netresec ⋅ Erik Hjelmvik
Detecting AtlasRAT C2
Atlas RAT
2026-10-10 ⋅ GBHackers on Security ⋅ Eswar
DarkBlinders Hackers Use Fake Meeting App to Deploy Backdoor and Steal Government Data
DarkBlinders
2026-10-09 ⋅ Rogue Authority ⋅ Squiblydoo
A signed PDF viewer that quietly takes orders: the QuartzLine “zenith” backdoor
CLOUDHAZE
2026-10-08 ⋅ The Record ⋅ Alexander Martin
ASOS: Hackers tricked way into employee account before sending rogue push notification
Xuanye Group
2026-10-08 ⋅ News4hackers ⋅ Anuj
ASOS Data Breach Exposed: Social Engineering Attack and Credential Theft Revealed
Xuanye Group
2026-10-08 ⋅ Zscaler ⋅ Seongsu Park
Trojanized Terraform Provider Campaign
2026-10-08 ⋅ Gen Digital ⋅ Jan Rubín, Vojtěch Krejsa
Warden Stealer: The Rapid Rise of an Infostealer with an Appetite for AI Agent Data
WARDENStealer
2026-10-07 ⋅ GBHackers on Security ⋅ Mayura Kathir
Partisan Zmiy Malware Campaign Uses Telegram and DNS Tunneling to Target Healthcare Networks
Cyber Partisans
2026-10-07 ⋅ cocomelonc ⋅ cocomelonc
Malware development trick 67: Run shellcode via CreateThreadpoolWait. C and assembly examples
2026-10-07 ⋅ Censys ⋅ Aidan Holland
DarkSword/Coruna Open Directory Finding Report
Coruna GHOSTBLADE