Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-07-20 ⋅ sysdig ⋅ Michael Clark
JADEPUFFER evolves: The agentic threat actor deploys ransomware built to destroy AI models
JadePuffer
2026-07-16 ⋅ Microsoft Security ⋅ Balaji Venkatesh S, Microsoft Security Research
ACR Stealer: Two observed intrusion chains amid increased threat activity
ACR Stealer
2026-07-15 ⋅ Symantec ⋅ Threat Hunter Team
Daxin Returns: Stealthy Malware Resurfaces in Taiwan Alongside a New Backdoor
Daxin
2026-07-07 ⋅ Proofpoint ⋅ Greg Lesnewich, Mark Kelly, Proofpoint Threat Research Team
One Email Closer to the Edge: UNK_MassTraction & the Physics of Exploitation
IceCube
2026-06-26 ⋅ Censys ⋅ Aidan Holland
AsyncRAT Family Threat Overview
AsyncRAT BitRAT DCRat Quasar RAT Venom RAT
2026-06-25 ⋅ Google ⋅ Google Threat Intelligence Group
The Latest Addition to Turla’s Intelligence Gathering Apparatus
Kazuar
2026-06-15 ⋅ Google ⋅ John McGuiness, Patrick Whitsell
"Public and Private Medical Community Targeted by China-Nexus Threat Actor Pursuing Artificial Intelligence, Cyber, Medical, and National Defense Research
UNC6508
2026-06-09 ⋅ Zscaler ⋅ ThreatLabZ research team
Technical Analysis of MLTBackdoor
MLTBackdoor
2026-06-09 ⋅ CrowdStrike ⋅ Counter Adversary Operations
CrowdStrike 2026 Technology Threat Landscape Report: China’s Ambitions Fuel Attacks
2026-06-03 ⋅ Microsoft ⋅ Microsoft
How Microsoft names threat actors
Wisteria Tsunami
2026-06-03 ⋅ Proofpoint ⋅ Proofpoint Threat Research Team
TA4922: The Suspected Chinese Crime Group is Going Global
Atlas RAT RomulusLoader SilentRunLoader TA4922
2026-06-02 ⋅ Threat Review Journal ⋅ Threat Review Journal
Investigation into APT 5 and their inner workings of PLA Troop 61786
2026-05-28 ⋅ eSentire ⋅ eSentire
Nimbus RAT: How Threat Actors Are Abusing Microsoft Teams and Google Drive to Deploy a Java RAT
2026-05-27 ⋅ Wiz.io ⋅ Andre Maccarone, Benjamin Read, Eden Abergil, Shira Ayal, Yuval Dan
Commit to Compromise: A New Threat Actor Targeting the Cryptocurrency Industry's Software Development Infrastructure
JINX-0164
2026-05-21 ⋅ Symantec ⋅ Threat Hunter Team
GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses
win.beast MimiKatz Hyadina
2026-05-21 ⋅ PWC ⋅ PwC Threat Intelligence
Inside Red Lamassu’s JFMBackdoor
JFMBackdoor Calypso
2026-05-19 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Exposing Fox Tempest: A malware-signing service operation (Podcast)
Akira Rhysida Akira BlackByte BlueSky Broomstick Lumma Stealer Rhysida Spyder Vidar Fox Tempest
2026-05-18 ⋅ Gen Threat Labs ⋅ Gen Threat Labs
X.com - Gen Threat Labs - AuraStealer (version 1.8.0)
Aura Stealer
2026-05-16 ⋅ Symantec ⋅ Threat Hunter Team
Fast16: Pre-Stuxnet Sabotage Tool Was Built to Subvert Nuclear Weapons Simulations
fast16
2026-05-14 ⋅ eSentire ⋅ eSentire Threat Response Unit (TRU)
Amatera Stealer 4.0.2 Beta: What's New in This Variant
Amatera