Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-06-17 ⋅ SpecterOps ⋅ Elad Shamir
Shadow Credentials: Abusing Key Trust Account Mapping for Account Takeover
2021-06-17 ⋅ Gigamon ⋅ Joe Slowik
Hold the Door: Examining Exfiltration Activity and Applying Countermeasures
2021-06-17 ⋅ Binary Defense ⋅ Brandon George
Analysis of Hancitor – When Boring Begets Beacon
Cobalt Strike Ficker Stealer Hancitor
2021-06-17 ⋅ Kaspersky ⋅ Marc Rivero López
Black Kingdom ransomware
BlackKingdom Ransomware
2021-06-16 ⋅ The Hacker News ⋅ Ravie Lakshmanan
Ransomware Attackers Partnering With Cybercrime Groups to Hack High-Profile Targets
TA577
2021-06-16 ⋅ Recorded Future ⋅ Insikt Group®
Threat Activity Group RedFoxtrot Linked to China’s PLA Unit 69010; Targets Bordering Asian Countries
Icefog PcShare PlugX Poison Ivy QuickHeal DAGGER PANDA
2021-06-16 ⋅ ⋅ Venustech ⋅ ADLab
APT34 organization latest in-depth analysis report on attack activities
Karkoff
2021-06-16 ⋅ ⋅ Microstep Online Research Response Center ⋅ Ring-1
Evilnum organizes recent attacks against European financial companies
EVILNUM
2021-06-16 ⋅ Facebook ⋅ Nathaniel Gleicher
Removing Coordinated Inauthentic Behavior From Ethiopia
2021-06-16 ⋅ SentinelOne ⋅ Antonio Pirozzi
Gootloader: ‘Initial Access as a Service’ Platform Expands Its Search for High Value Targets
GootLoader
2021-06-16 ⋅ Twitter (@ChouchWard) ⋅ ch0uch ward
Tweet on Qbot operators left their web server's access.log file unsecured
QakBot
2021-06-16 ⋅ Medium BI.ZONE ⋅ Anton Medvedev, Vadim Khrykov
Hunting Down MS Exchange Attacks. Part 2 (CVE-2020–0688, CVE-2020–16875, CVE-2021–24085)
2021-06-16 ⋅ ⋅ Національної поліції України ⋅ Національна поліція України
Cyberpolice exposes hacker group in spreading encryption virus and causing half a billion dollars in damage to foreign companies
Clop Cobalt Strike FlawedAmmyy
2021-06-16 ⋅ RiskIQ ⋅ Jordan Herman
Bit2Check: Investigating Actors in the Carding Space
2021-06-16 ⋅ Proofpoint ⋅ Daniel Blackford, Garrett M. Graff, Selena Larson
The First Step: Initial Access Leads to Ransomware
BazarBackdoor Egregor IcedID Maze QakBot REvil Ryuk TrickBot WastedLocker TA570 TA575 TA577
2021-06-15 ⋅ Perception Point ⋅ Shai Golderman
Insights Into an Excel 4.0 Macro Attack using Qakbot Malware
QakBot
2021-06-15 ⋅ The Record ⋅ Catalin Cimpanu
Source code for Paradise ransomware leaked on hacking forums
Paradise
2021-06-15 ⋅ Tenable ⋅ Derek Melber
How to Protect Active Directory Against Ransomware Attacks
2021-06-15 ⋅ Elastic ⋅ Gabriel Landau
What you need to know about Process Ghosting, a new executable image tampering attack
2021-06-15 ⋅ Secureworks ⋅ Counter Threat Unit ResearchTeam
Hades Ransomware Operators Use Distinctive Tactics and Infrastructure
Cobalt Strike Hades