Click here to download all references as Bib-File.•
2025-04-04
⋅
⋅
Youtube (greenplan)
⋅
[BINARY REFINERY] (StegoCampaign) - Deobfuscation of a VBScript stage (PART 2) |
2025-04-04
⋅
The Hacker News
⋅
OPSEC Failure Exposes Coquettte's Malware Campaigns on Bulletproof Hosting Servers Rugmi |
2025-04-04
⋅
US District Court Middle District of Florida
⋅
United States of America v. Noah Michael Urban |
2025-04-04
⋅
Socket
⋅
Lazarus Expands Malicious npm Campaign: 11 New Packages Add Malware Loaders and Bitbucket Payloads BeaverTail InvisibleFerret |
2025-04-03
⋅
Mandiant
⋅
Suspected China-Nexus Threat Actor Actively Exploiting Critical Ivanti Connect Secure Vulnerability (CVE-2025-22457) SPAWNSNARE |
2025-04-03
⋅
ThreatMon
⋅
Ransomhub Group & New Betruger Backdoor Technical Malware Analysis Report |
2025-04-02
⋅
ASEC
⋅
BeaverTail and Tropidoor Malware Distributed via Recruitment Emails BeaverTail |
2025-04-02
⋅
ANALYST1
⋅
Inside BlackBasta: Actor Profiles, Extortion Tactics & Finances Black Basta Black Basta |
2025-04-02
⋅
BushidoToken
⋅
Tracking Adversaries: EvilCorp, the RansomHub affiliate RansomHub |
2025-04-02
⋅
Intel 471
⋅
An in-depth look at Black Basta's TTPs Black Basta Black Basta |
2025-04-01
⋅
ANY.RUN
⋅
Salvador Stealer: New Android Malware That Phishes Banking Details & OTPs Salvador Stealer |
2025-04-01
⋅
ZW01f
⋅
Auto-color - Linux backdoor Auto-Color |
2025-03-31
⋅
48157c03bf9731926f9567fe1fabc807bff166241f8d6c27e6308dde68112669 Supper |
2025-03-31
⋅
Trend Micro
⋅
The Espionage Toolkit of Earth Alux: A Closer Look at its Advanced Techniques Godzilla Webshell Cobalt Strike RAILSETTER Earth Alux |
2025-03-31
⋅
Zscaler
⋅
Analyzing New HijackLoader Evasion Tactics HijackLoader |
2025-03-31
⋅
Sekoia
⋅
From Contagious to ClickFake Interview: Lazarus leveraging the ClickFix tactic FrostyFerret GolangGhost GolangGhost |
2025-03-31
⋅
GootLoader Wordpress
⋅
Gootloader Returns: Malware Hidden in Google Ads for Legal Documents GootLoader |
2025-03-28
⋅
Trend Micro
⋅
A Deep Dive into Water Gamayun’s Arsenal and Infrastructure DarkWisp SilentPrism Kematian Stealer Rhadamanthys Stealc Water Gamayun |
2025-03-28
⋅
Cisco Talos
⋅
Gamaredon campaign abuses LNK files to distribute Remcos backdoor Remcos |
2025-03-28
⋅
cyble
⋅
TsarBot: A New Android Banking Trojan Targeting Over 750 Banking, Finance, and Cryptocurrency Applications TsarBot |