Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-09-18 ⋅ K7 Security ⋅ Ashwath M Ram
From Registry-Stored PowerShell to In-Memory Cryptocurrency Mining: A Multi-Stage Infection Chain
xmrig
2026-09-18 ⋅ CyberScoop ⋅ Matt Kapko
Early Scattered Spider member pleads guilty to cybercrime spree
2026-09-18 ⋅ SentinelOne ⋅ Albert Priego, Alex Delamotte, Matěj Havránek
Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties
Gaslight LightlessCan
2026-09-17 ⋅ OpenSourceMalware ⋅ Paul McCarty
WeaselBiscuit Strips BeaverTail and OtterCookie Down to Essentials
BeaverTail OtterCookie BeaverTail Beavertail
2026-09-17 ⋅ Socket ⋅ Karlo Zanki
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
2026-09-17 ⋅ Chainalysis ⋅ Chainalysis Team
DPRK and Iran are Leading a 5.2x Surge YoY in Blockchain-Assisted Cyberattacks
2026-09-17 ⋅ ESET Research ⋅ Alexandre Côté Cyr, Romain Dumont
Beware the SparroWock: The backdoor that bites, the commands that catch
SparrowDoor
2026-09-14 ⋅ Barracuda ⋅ Barracuda Networks
The fake worker threat and the rise of human infiltration
2026-09-13 ⋅ Acronis ⋅ Subhajeet Singha
Red Heron exploits Gitea n-day flaw in multinational campaign, exposing new Linux rootkit
AdaptixC2
2026-09-10 ⋅ Fortinet ⋅ Rachael Liao
Casbaneiro: A Banking Trojan with Distributed Data-Receiving Servers
Metamorfo
2026-09-09 ⋅ ⋅ Orange CERT ⋅ Ireneusz Tarnowski, Olaf Grzybowski
Koktevrat – a multi-stage Android RAT distributed under the guise of the MandatGO app
Koktevrat
2026-09-07 ⋅ Invoke RE ⋅ Josh Reynolds
Breaking Efimer’s Pyarmor Infection Chain with Frida
2026-09-07 ⋅ Kudelski Security ⋅ Clifford, Coline Chavane, Saee V., TDR Team
Beyond Lazarus: Organization of DPRK Cyber Capabilities
Qilin KillDisk Maui Ransomware PLAY SiennaBlue SiennaPurple WannaCryptor
2026-09-07 ⋅ Sekoia ⋅ Clifford, Coline Chavane, Saee V., TDR Team
Beyond Lazarus: Organization of DPRK cyber capabilities
Qilin KillDisk Maui Ransomware PLAY SiennaBlue SiennaPurple WannaCryptor
2026-09-04 ⋅ Rapid7 ⋅ Rapid7 Labs
DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors
2026-09-03 ⋅ Abstract Security ⋅ Abstract Security Threat Research Organization (ASTRO)
Chaotic Eclipse Releases CrowdStrike Falcon Zero-Day FalconFlank: Detection Guidance
2026-09-03 ⋅ Jamf Blog ⋅ Jamf Threat Labs
Contagious Interview steps outside the developer workflow
OtterCookie
2026-09-02 ⋅ Malware INFO ⋅ Malware INFO Research Team
Fake GlobalProtect MSI Targets Myanmar Using Cloudflare and Google Sheets as C2
Unidentified 126 (GoogleSheets C2)
2026-08-30 ⋅ Medium 0xzyadelzyat ⋅ Zyad Elzyat
Reverse Engineering the Auto-Color Linux Backdoor
Auto-Color
2026-08-28 ⋅ ⋅ F6 ⋅ F6
Ragnarök: F6 investigated the attacks of the VantaCore ransomware group
Babuk LockBit