Click here to download all references as Bib-File.•
| 2022-08-11
⋅
Medium walmartglobaltech
⋅
State of the Remote Access Tools, Part 1 |
| 2022-08-09
⋅
Medium walmartglobaltech
⋅
Pivoting on a SharpExt to profile Kimusky panels for great good Kimsuky |
| 2022-08-04
⋅
Medium walmartglobaltech
⋅
IcedID leverages PrivateLoader IcedID PrivateLoader |
| 2022-05-25
⋅
Medium walmartglobaltech
⋅
SocGholish Campaigns and Initial Access Kit FAKEUPDATES Blister Cobalt Strike NetSupportManager RAT |
| 2022-04-15
⋅
Medium walmartglobaltech
⋅
Revisiting BatLoader C2 structure BATLOADER |
| 2022-03-28
⋅
Medium walmartglobaltech
⋅
CobaltStrike UUID stager Cobalt Strike |
| 2022-03-10
⋅
Medium walmartglobaltech
⋅
Diavol the Enigma of Ransomware Diavol |
| 2022-03-04
⋅
Medium walmartglobaltech
⋅
SystemBC, PowerShell version SystemBC |
| 2022-02-14
⋅
Medium walmartglobaltech
⋅
PrivateLoader to Anubis Loader Anubis Loader PrivateLoader |
| 2022-02-01
⋅
Medium walmartglobaltech
⋅
Sugar Ransomware, a new RaaS Sugar |
| 2022-01-11
⋅
Medium walmartglobaltech
⋅
Signed DLL campaigns as a service BATLOADER Cobalt Strike ISFB Zloader |
| 2021-10-14
⋅
Medium walmartglobaltech
⋅
Investigation into the state of NIM malware Part 2 Cobalt Strike NimGrabber Nimrev Unidentified 088 (Nim Ransomware) |
| 2021-09-07
⋅
Medium walmartglobaltech
⋅
Decoding SmartAssembly strings, a Haron ransomware case study Haron Ransomware |
| 2021-08-19
⋅
Medium walmartglobaltech
⋅
Looking at the new Krypton crypter and recent Data Exfiltrator Samples |
| 2021-07-30
⋅
Medium walmartglobaltech
⋅
Decrypting BazarLoader strings with a Unicorn BazarBackdoor |
| 2021-07-08
⋅
Medium walmartglobaltech
⋅
Amadey stealer plugin adds Mikrotik and Outlook harvesting Amadey |
| 2021-07-06
⋅
Medium walmartglobaltech
⋅
TA505 adds GoLang crypter for delivering miners and ServHelper ServHelper |
| 2021-06-07
⋅
Medium walmartglobaltech
⋅
Inside the SystemBC Malware-As-A-Service Ryuk SystemBC TrickBot |
| 2021-05-03
⋅
Medium walmartglobaltech
⋅
BuerLoader Updates Buer |
| 2021-04-20
⋅
Medium walmartglobaltech
⋅
CobaltStrike Stager Utilizing Floating Point Math Cobalt Strike |
| 2021-04-09
⋅
Medium walmartglobaltech
⋅
A Relook at the TerraLoader Dropper DLL TerraLoader |
| 2021-04-07
⋅
Medium walmartglobaltech
⋅
Not your same old adware anymore, PBOT updates |
| 2021-04-05
⋅
Medium walmartglobaltech
⋅
TrickBot Crews New CobaltStrike Loader Cobalt Strike TrickBot |
| 2021-03-05
⋅
Medium walmartglobaltech
⋅
A look at an Android bot from unpacking to DGA FluBot |
| 2021-03-01
⋅
Medium walmartglobaltech
⋅
Investigation into the state of Nim malware BazarNimrod Cobalt Strike |
| 2021-03-01
⋅
Medium walmartglobaltech
⋅
Nimar Loader BazarBackdoor BazarNimrod Cobalt Strike |
| 2021-01-20
⋅
Medium walmartglobaltech
⋅
Anchor and Lazarus together again? Anchor TrickBot |
| 2021-01-12
⋅
Medium walmartglobaltech
⋅
De-ofuscating GoLang Functions |
| 2021-01-10
⋅
Medium walmartglobaltech
⋅
MAN1, Moskal, Hancitor and a side of Ransomware Cobalt Strike Hancitor SendSafe VegaLocker Moskalvzapoe |
| 2020-05-31
⋅
Medium walmartglobaltech
⋅
WastedLoader or DridexLoader? Dridex WastedLocker |