Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-04-07 ⋅ splunk ⋅ Splunk Threat Research Team
You Bet Your Lsass: Hunting LSASS Access
Cobalt Strike MimiKatz
2022-04-07 ⋅ Blackberry ⋅ The BlackBerry Research & Intelligence Team
Threat Thursday: AvosLocker Prompts Advisory from FBI and FinCEN
Avoslocker AvosLocker
2022-04-07 ⋅ clearskysec ⋅ ClearSky Research Team
Exposing the Iranian EvilNominatus Ransomware
2022-04-07 ⋅ Team Cymru ⋅ Josh Hopkins
MoqHao Part 2: Continued European Expansion
MoqHao
2022-04-07 ⋅ Sekoia ⋅ Threat & Detection Research Team
Mars, a red-hot information stealer
Mars Stealer
2022-04-06 ⋅ Github (infinitumlabs) ⋅ Arda Büyükkaya
Karakurt Hacking Team Indicators of Compromise (IOC)
Cobalt Strike
2022-04-05 ⋅ AhnLab ⋅ ASEC Analysis Team
Malicious Word Documents Using MS Media Player (Impersonating AhnLab)
2022-04-05 ⋅ Secureworks ⋅ Counter Threat Unit ResearchTeam
Azure Active Directory Exposes Internal Information
2022-04-05 ⋅ Symantec ⋅ Threat Hunter Team
Cicada: Chinese APT Group Widens Targeting in Recent Espionage Activity
MimiKatz SodaMaster
2022-04-05 ⋅ Intel 471 ⋅ Intel 471
Move fast and commit crimes: Conti’s development teams mirror corporate tech
BazarBackdoor TrickBot
2022-04-01 ⋅ splunk ⋅ Splunk Threat Research Team
Threat Update: CaddyWiper
CaddyWiper
2022-03-31 ⋅ Blackberry ⋅ The BlackBerry Research & Intelligence Team
Threat Thursday: Malicious Macros Still Causing Chaos
2022-03-31 ⋅ nccgroup ⋅ Alex Jessop, Nikolaos Pantazopoulos, RIFT: Research and Intelligence Fusion Team, Simon Biggs
Conti-nuation: methods and techniques observed in operations post the leaks
Cobalt Strike Conti QakBot
2022-03-30 ⋅ CrowdStrike ⋅ CrowdStrike Threat Intel Team
Who is EMBER BEAR?
WhisperGate
2022-03-30 ⋅ ASEC ⋅ ASEC Analysis Team
Malicious Word File Targeting Corporate Users Being Distributed
2022-03-29 ⋅ ⋅ ASEC ⋅ ASEC Analysis Team
APT Attack Impersonating Defector Resume Form (VBS SCRIPT)
2022-03-29 ⋅ Symantec ⋅ Threat Hunter Team
Verblecon: Sophisticated New Loader Used in Low-level Attacks
Verblecon
2022-03-28 ⋅ Avast ⋅ Threat Intelligence Team
Avast Finds Compromised Philippine Navy Certificate Used in Remote Access Tool
Unidentified 091
2022-03-28 ⋅ splunk ⋅ Splunk Threat Research Team
Threat Update DoubleZero Destructor
DoubleZero
2022-03-24 ⋅ Blackberry ⋅ The BlackBerry Research & Intelligence Team
Threat Thursday: SunSeed Malware Targets Ukraine Refugee Aid Efforts
SunSeed