Click here to download all references as Bib-File.•
| 2024-10-09
⋅
Palo Alto
⋅
Contagious Interview: DPRK Threat Actors Lure Tech Industry Job Seekers to Install New Variants of BeaverTail and InvisibleFerret Malware BeaverTail Beavertail |
| 2024-10-06
⋅
Google
⋅
Caught in the wild - Past, present and future |
| 2024-10-04
⋅
nikhilh-20
⋅
Emansrepo Infostealer - PyInstaller, Deobfuscation and LLM emansrepo |
| 2024-10-03
⋅
Virus Bulletin
⋅
Sugarcoating KANDYKORN: a sweet dive into a sophisticated MacOS backdoor HLOADER KANDYKORN SUGARLOADER |
| 2024-10-03
⋅
Microsoft
⋅
Protecting Democratic Institutions from Cyber Threats Callisto |
| 2024-10-03
⋅
CitizenLab
⋅
Disrupting COLDRIVER: U.S. court orders seizure of domains used in Russian cyberattacks Callisto |
| 2024-10-02
⋅
Secureworks
⋅
2024 State of the Threat GOLD REBELLION |
| 2024-10-02
⋅
ThreatMon
⋅
Amnesia Stealer Technical Malware Analysis Report BlankGrabber |
| 2024-10-02
⋅
ESET Research
⋅
Separating the bee from the panda: CeranaKeeper making a beeline for Thailand PUBLOAD TONESHELL WavyExfiller CeranaKeeper |
| 2024-10-01
⋅
Cybereason
⋅
THREAT ANALYSIS: Beast Ransomware win.beast |
| 2024-10-01
⋅
raw-data memdumps
⋅
BugSleep network protocol reversing bugsleep |
| 2024-09-30
⋅
OALabs
⋅
Latrodectus Extracting new AES encrypted strings from this RAT Latrodectus |
| 2024-09-30
⋅
X (@GenThreatLabs)
⋅
Tweet on FAKEUPDATES pushing WARMCOOKIE backdoor via compromised websites targeting France FAKEUPDATES WarmCookie |
| 2024-09-30
⋅
The DFIR Report
⋅
Nitrogen Campaign Drops Sliver and Ends With BlackCat Ransomware BlackCat Nitrogen Loader Sliver |
| 2024-09-27
⋅
Elastic
⋅
Betting on Bots: Investigating Linux malware, crypto mining, and gambling API abuse Kaiji RudeDevil |
| 2024-09-26
⋅
cyble
⋅
Nexe Backdoor Unleashed: Patchwork APT Group’s Sophisticated Evasion of Defenses |
| 2024-09-26
⋅
The Wall Street Journal
⋅
China-Linked Hackers Breach U.S. Internet Providers in New ‘Salt Typhoon’ Cyberattack GhostEmperor |
| 2024-09-26
⋅
Microsoft
⋅
Storm-0501: Ransomware attacks expanding to hybrid cloud environments Storm-0501 |
| 2024-09-26
⋅
Gdata
⋅
BBTok Targeting Brazil: Deobfuscating the .NET Loader with dnlib and PowerShell BBtok |
| 2024-09-26
⋅
Recorded Future
⋅
Rhadamanthys Stealer Adds Innovative AI Feature in Version 0.7.0 Rhadamanthys |