Click here to download all references as Bib-File.•
| 2024-07-01
⋅
Speakerdeck (takahiro_haruyama)
⋅
The Art of Malware C2 Scanning - How to Reverse and Emulate Protocol Obfuscated by Compiler DOPLUGS Hodur |
| 2024-06-10
⋅
The Hacker News
⋅
More_eggs Malware Disguised as Resumes Targets Recruiters in Phishing Attack More_eggs |
| 2024-05-23
⋅
Twitter (@embee_research)
⋅
Tracking APT SideWinder With DNS Records SideWinder |
| 2024-05-21
⋅
Twitter (@embee_research)
⋅
Tweets on decoding a Latrodectus loader Latrodectus |
| 2024-05-15
⋅
Twitter (@embee_research)
⋅
Revealing Spammer Infrastructure With Passive DNS - 226 Toll-Themed Domains Targeting Australia |
| 2024-04-29
⋅
Twitter (@sekoia_io)
⋅
@sekoia_io's tweet about the (not so) new infostealer, named ACR Stealer ACR Stealer |
| 2024-04-11
⋅
Twitter (@embee_research)
⋅
Tracking Malicious Infrastructure With DNS Records - Vultur Banking Trojan Vultur |
| 2024-04-04
⋅
Twitter (@embee_research)
⋅
TLS Certificate For Threat Intelligence - Identifying MatanBuchus Domains Through Hardcoded Certificate Values Matanbuchus |
| 2024-04-01
⋅
Twitter (@embee_research)
⋅
Passive DNS For Phishing Link Analysis - Identifying 36 Latrodectus Domains With Historical Records and 302 Redirects Latrodectus |
| 2024-03-30
⋅
Twitter (@embee_research)
⋅
Uncovering APT Infrastructure with Passive DNS Pivoting |
| 2024-03-27
⋅
Twitter (@embee_research)
⋅
Uncovering Malicious Infrastructure with DNS Pivoting LokiBot XWorm |
| 2024-03-25
⋅
embeeresearch
⋅
Latrodectus Deobfuscation - Removal of Junk Comments and Self-Referencing Code Latrodectus |
| 2024-03-19
⋅
Medium (@DCSO_CyTec)
⋅
How Rogue ISPs Tamper With Geofeeds |
| 2024-03-18
⋅
Twitter (@juanandres_gs)
⋅
Twitter thread on the sample identified AcidPour |
| 2024-03-11
⋅
YouTube (Embee Research)
⋅
Xworm Script Analysis and Deobfuscation XWorm |
| 2024-02-26
⋅
Twitter (@embee_research)
⋅
Advanced CyberChef Techniques for Configuration Extraction - Detailed Walkthrough and Examples NetSupportManager RAT |
| 2024-02-25
⋅
YouTube (Embee Research)
⋅
My Longest CyberChef Recipe Ever - 22 Operation Configuration Extractor NetSupportManager RAT |
| 2024-02-20
⋅
YouTube (Embee Research)
⋅
StealC Loader Analysis - Decoding Powershell Malware With CyberChef Stealc |
| 2024-02-09
⋅
Censys
⋅
A Beginners Guide to Tracking Malware Infrastructure AsyncRAT BianLian Cobalt Strike QakBot |
| 2024-02-09
⋅
YouTube (Embee Research)
⋅
Guloader Decoding With Cyberchef CloudEyE |