Click here to download all references as Bib-File.•
| 2025-10-31
⋅
Seqrite
⋅
Operation SkyCloak: Tor Campaign targets Military of Russia & Belarus |
| 2025-10-31
⋅
Expel
⋅
Certified OysterLoader: Tracking Rhysida ransomware gang activity via code-signing certificates Broomstick |
| 2025-10-30
⋅
Gen Digital
⋅
DPRK’s Playbook: Kimsuky’s HttpTroy and Lazarus’s New BLINDINGCAN Variant ComeBacker DRATzarus NikiTeaR |
| 2025-10-30
⋅
Twitter (@DarkWebInformer)
⋅
Tweet about Aisuru C2 being on top of Cloudflare Radar / Top100 domain Aisuru |
| 2025-10-29
⋅
Qianxin
⋅
Smoking Gun Uncovered: RPX Relay at PolarEdge’s Core Exposed PolarEdge |
| 2025-10-28
⋅
KrebsOnSecurity
⋅
Aisuru Botnet Shifts from DDoS to Residential Proxies Aisuru |
| 2025-10-28
⋅
Kaspersky
⋅
Crypto wasted: BlueNoroff’s ghost mirage of funding and jobs |
| 2025-10-27
⋅
Earth Estries alive and kicking |
| 2025-10-27
⋅
Kaspersky
⋅
Mem3nt0 mori – The Hacking Team is back! Dante |
| 2025-10-25
⋅
MandarNaik016
⋅
Malware Analysis - VIP Keylogger - Part 2 VIP Keylogger |
| 2025-10-23
⋅
ESET Research
⋅
Gotta fly: Lazarus targets the UAV sector BURNBOOK QuanPinLoader ScoringMathTea |
| 2025-10-23
⋅
Twitter (@salmanvsf)
⋅
Tweet about Discovery of Smile PaaS admin panel |
| 2025-10-22
⋅
Trend Micro
⋅
The Rise of Collaborative Tactics Among China-aligned Cyber Espionage Campaigns Cobalt Strike DracuLoader ShadowPad |
| 2025-10-22
⋅
SentinelOne
⋅
PhantomCaptcha | Multi-Stage WebSocket RAT Targets Ukraine in Single-Day Spearphishing Operation Princess |
| 2025-10-21
⋅
HarfangLab
⋅
RudePanda owns IIS servers like it's 2003 TOLLBOOTH |
| 2025-10-20
⋅
Darktrace
⋅
Salty Much: Darktrace’s view on a recent Salt Typhoon intrusion SNAPPYBEE |
| 2025-10-20
⋅
Medium Deriv-Tech
⋅
How a fake AI recruiter delivers five staged malware disguised as a dream job BeaverTail OtterCookie InvisibleFerret |
| 2025-10-19
⋅
⋅
CNCERT
⋅
Technical Analysis Report on National Timing Center's National Security Agency Cyberattacks DanderSpritz |
| 2025-10-18
⋅
Twitter (@ThreatrayLabs)
⋅
Tweet on Kimsuky activity with loaders delivering HttpSpy and HttpTroy NikiTeaR |
| 2025-10-18
⋅
Koi Security
⋅
GlassWorm: First Self-Propagating Worm Using Invisible Code Hits OpenVSX Marketplace GlassWorm |