Click here to download all references as Bib-File.•
| 2026-04-23
⋅
bluecyber
⋅
MUSTANG PANDA × PLUGX - From deceptive LNK to multi-transport backdoor PlugX |
| 2026-04-23
⋅
Mandiant
⋅
Snow Flurries: How UNC6692 Employed Social Engineering to Deploy a Custom Malware Suite SNOWBASIN UNC6692 |
| 2026-04-22
⋅
Secure Blink
⋅
Mustang Panda Strikes India and South Korea with Updated LOTUSLITE Backdoor in Espionage Campaign LOTUSLITE |
| 2026-04-22
⋅
Ransom-ISAC
⋅
DragonBreath: Dragon in the Kernel DragonBreath |
| 2026-04-22
⋅
Expel
⋅
Inside Lazarus: How North Korea uses AI to industrialize attacks on developers BeaverTail OtterCookie InvisibleFerret HexagonalRodent |
| 2026-04-21
⋅
Trend Micro
⋅
Void Dokkaebi Uses Fake Job Interview Lure to Spread Malware via Code Repositories BeaverTail JADESNOW OtterCookie InvisibleFerret |
| 2026-04-20
⋅
Twitter (@suyog41)
⋅
Tweet about LedgerChecker Stealer LedgerChecker Stealer |
| 2026-04-18
⋅
Hexastrike Cybersecurity
⋅
Cloned, Loaded, and Stolen: How 109 Fake GitHub Repositories Delivered SmartLoader and StealC SmartLoader Stealc |
| 2026-04-16
⋅
YouTube (botconf eu)
⋅
Chasing XLoader: Tracking a Notoriously Complex Malware Family at Scale Xloader Formbook |
| 2026-04-16
⋅
Twitter (@anyrun_app)
⋅
Tweet about SpankRat SpankRAT |
| 2026-04-16
⋅
Darktrace
⋅
Inside ZionSiphon: Darktrace’s Analysis of OT Malware Targeting Israeli Water Systems ZionSiphon |
| 2026-04-15
⋅
Cyberdaily.au
⋅
Exclusive: Krybit hackers claim breach of New Zealand IT services provider Krybit |
| 2026-04-15
⋅
Orange Cyberdefense
⋅
Smoking Out an Affiliate: SmokedHam, Qilin, a few Google Ads and some Bossware Qilin AgendaCrypt SMOKEDHAM |
| 2026-04-15
⋅
Orange Cyberdefense
⋅
Smoking Out an Affiliate: SmokedHam, Qilin, a few Google ads and some bossware AgendaCrypt SMOKEDHAM |
| 2026-04-14
⋅
RedPacket Security
⋅
[KRYBIT] – Ransomware Victim: Hacked 0APT Krybit |
| 2026-04-13
⋅
Dark Web Informer
⋅
Polish Eco-Friendly Retailer VegeHome Suffers Data Breach Exposing 100K+ Customers LulzIntel |
| 2026-04-13
⋅
Tweet about HanGhost HanGhost |
| 2026-04-13
⋅
Twitter (@anyrun_app)
⋅
Tweet about HanGhost |
| 2026-04-13
⋅
Dataminr
⋅
Cyber Intel Brief: Pro-Iranian Actor Ababil of Minab Claims Cyberattack on LA Metro (LACMTA) Ababil of Minab |
| 2026-04-12
⋅
cocomelonc
⋅
Mobile malware development trick 3. CPU info logger: anti-VM and anti-sandbox. Simple Android (Kotlin) example. |