Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-05-05 ⋅ Malwarebytes Labs ⋅ Threat Intelligence Team
Nigerian Tesla: 419 scammer gone malware distributor unmasked
Agent Tesla
2022-04-05 ⋅ Malwarebytes Labs ⋅ Ankur Saini, Hossein Jazi, Jérôme Segura
Colibri Loader combines Task Scheduler and PowerShell in clever persistence technique
Colibri Loader Mars Stealer
2022-04-01 ⋅ Malwarebytes ⋅ Ankur Saini, Hossein Jazi, Roberto Santos
New UAC-0056 activity: There’s a Go Elephant in the room
GrimPlant SaintBear
2022-03-29 ⋅ Malwarebytes Labs ⋅ Hossein Jazi
New spear phishing campaign targets Russian dissidents
Unidentified PS 002 (RAT) Cobalt Strike
2022-03-18 ⋅ Malwarebytes ⋅ Threat Intelligence Team
Double header: IsaacWiper and CaddyWiper
CaddyWiper IsaacWiper
2022-03-04 ⋅ Malwarebytes ⋅ Malwarebytes Threat Intelligence
HermeticWiper: A detailed analysis of the destructive malware that targeted Ukraine
HermeticWiper
2022-01-27 ⋅ Malwarebytes Labs ⋅ Ankur Saini, Hossein Jazi
North Korea’s Lazarus APT leverages Windows Update client, GitHub in latest campaign
2022-01-26 ⋅ Malwarebytes ⋅ Roberto Santos
KONNI evolves into stealthier RAT
Konni
2022-01-07 ⋅ Malwarebytes ⋅ Threat Intelligence Team
Patchwork APT caught in its own web
BadNews
2021-12-02 ⋅ Malwarebytes ⋅ Hossein Jazi, Threat Intelligence Team
SideCopy APT: Connecting lures to victims, payloads to infrastructure
SideCopy
2021-11-16 ⋅ Malwarebytes ⋅ Malwarebytes Threat Intelligence Team
TrickBot helps Emotet come back from the dead
Emotet TrickBot
2021-11-15 ⋅ Malwarebytes ⋅ Jovi Umawing
Evasive maneuvers: HTML smuggling explained
2021-11-12 ⋅ Malwarebytes ⋅ Hossein Jazi
A multi-stage PowerShell based attack targets Kazakhstan
Cobalt Strike
2021-11-03 ⋅ Malwarebytes ⋅ Jérôme Segura
Credit card skimmer evades Virtual Machines
magecart
2021-10-21 ⋅ Malwarebytes ⋅ Pieter Arntz
Chrome targeted by Magnitude exploit kit
2021-10-19 ⋅ Malwarebytes ⋅ Jérôme Segura
q-logger skimmer keeps Magecart attacks going
magecart
2021-09-13 ⋅ Malwarebytes ⋅ Jérôme Segura
The many tentacles of Magecart Group 8
magecart
2021-08-20 ⋅ Malwarebytes ⋅ Hossein Jazi
New variant of Konni malware used in campaign targetting Russia
Konni
2021-07-28 ⋅ Malwarebytes ⋅ Hossein Jazi
Crimea “manifesto” deploys VBA Rat using double attack vectors
2021-07-26 ⋅ Malwarebytes ⋅ Thomas Reed
OSX.XLoader hides little except its main purpose: What we learned in the installation process
Xloader