Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-04-24 ⋅ Medium lordx64 ⋅ Taha Karim
Initial analysis of PasswordState supply chain attack backdoor code
2021-04-23 ⋅ Twitter (@vikas891) ⋅ Vikas Singh
Tweet on DOPPEL SPIDER using Intensive/Multiple Injected Cobalt Strike Beacons with varied polling intervals
Cobalt Strike DoppelPaymer
2021-04-23 ⋅ xorl %eax, %eax ⋅ Anastasios Pingios
Analysis of the CardingMafia March 2021 data breach
2021-04-23 ⋅ CSIS ⋅ CSIS
Supply chain attack on the password manager Clickstudios - PASSWORDSTATE
Moserpass
2021-04-23 ⋅ Darktrace ⋅ Max Heinemeyer
APT35 ‘Charming Kitten' discovered in a pre-infected environment
2021-04-23 ⋅ CNBC ⋅ Eamon Javers
Axis of REvil: What we know about the hacker collective taunting Apple
REvil
2021-04-22 ⋅ Lacework Labs
Sysrv-Hello Expands Infrastructure
Sysrv-hello
2021-04-22 ⋅ lacework ⋅ Chris Hall, Jared Stroud
Sysrv-Hello Expands Infrastructure
Sysrv-hello
2021-04-22 ⋅ Github (@cecio) ⋅ @red5heep
EMOTET: a State-Machine reversing exercise
Emotet
2021-04-22 ⋅ Twitter (@AltShiftPrtScn) ⋅ Peter Mackenzie
Twwet On TTPs seen in IR used by DOPPEL SPIDER
Cobalt Strike DoppelPaymer
2021-04-22 ⋅ splunk ⋅ Dave Herrald, Drew Church, James Brodsky, John Stoner, Katie Brown, Marcus LaFerrera, Michael Natkin, Mick Baccio, Ryan Kovar
SUPERNOVA Redux, with a Generous Portion of Masquerading
SUPERNOVA
2021-04-22 ⋅ ⋅ BR.DE ⋅ Florian Flade, Hakan Tanriverdi
Der Mann in Merkels Rechner - Jagd auf Putins Hacker
2021-04-21 ⋅ Cybleinc ⋅ cybleinc
Donot Team APT Group Is Back To Using Old Malicious Patterns
KnSpy
2021-04-21 ⋅ Recorded Future ⋅ Insikt Group®
Iran-Linked Threat Actor The MABNA Institute’s Operations in 2020
2021-04-21 ⋅ Bleeping Computer ⋅ Lawrence Abrams
Massive Qlocker ransomware attack uses 7zip to encrypt QNAP devices
2021-04-21 ⋅ splunk ⋅ Bill Wright, Dave Herrald, James Brodsky, John Stoner, Kelly Huang, Marcus LaFerrerra, Michael Natkin, Mick Baccio, Ryan Kovar, Shannon Davis, Tamara Chacon
Monitoring Pulse Connect Secure With Splunk (CISA Emergency Directive 21-03)
2021-04-21 ⋅ Facebook ⋅ David Agranovich, Mike Dvilyanski
Taking Action Against Hackers in Palestine
SpyNote Houdini NjRAT
2021-04-21 ⋅ Facebook ⋅ Michael Flossman, Michael Scott
Technical Paper // Taking Action Against Arid Viper
Viper RAT Micropsia
2021-04-21 ⋅ Bleeping Computer ⋅ Lawrence Abrams
Logins for 1.3 million Windows RDP servers collected from hacker market
2021-04-21 ⋅ Virus Bulletin ⋅ Kurt Natvig
Run Your Malicious VBA Macros Anywhere!