Click here to download all references as Bib-File.•
2020-11-19
⋅
Twitter (@VK_intel)
⋅
Tweet on Trickbot Group pushing LIGHTBOT powershell script to gather information about AD Server LightBot |
2020-11-17
⋅
Twitter (@VK_intel)
⋅
Tweet on a new fileless TrickBot loading method using code from MemoryModule TrickBot |
2020-11-12
⋅
Twitter (@ddash_ct)
⋅
Tweet on Lootwodniw Lootwodniw |
2020-11-12
⋅
Twitter (@IntezerLabs)
⋅
Tweet on Agelocker AgeLocker |
2020-11-06
⋅
Twitter (@3xp0rtblog)
⋅
Tweet on Hunter Stealer Hunter Stealer |
2020-11-05
⋅
Twitter (@ffforward)
⋅
Tweet on Zloader infection leads to Cobaltstrike Installation and deployment of RYUK Cobalt Strike Ryuk Zloader |
2020-11-05
⋅
Intezer
⋅
Tweet on Ngioweb botnet Ngioweb |
2020-10-29
⋅
Twitter (@anthomsec)
⋅
Tweet on UNC1878 activity BazarBackdoor Ryuk TrickBot UNC1878 |
2020-10-29
⋅
Twitter (@SophosLabs)
⋅
Tweet on similarities between BUER in-memory loader & RYUK in-memory loader Buer Ryuk |
2020-10-28
⋅
Twitter (@BitsOfBinary)
⋅
Tweet on macOS version of Manuscrypt Manuscrypt |
2020-10-27
⋅
Twitter (@3xp0rtblog)
⋅
Tweet on Ficker Stealer Ficker Stealer |
2020-10-06
⋅
Twitter (@MsftSecIntel)
⋅
Tweet on TA505 threat actor exploiting Zerologon (CVE-2020-1472) Vulnerability |
2020-10-02
⋅
Twitter (@craiu)
⋅
Tweet about IAmTheKing / PowerPool actor naming PowerPool |
2020-09-23
⋅
Twitter (@demonslay335)
⋅
Tweet on Ironcat (Sodinokibi imposter) Ironcat |
2020-09-22
⋅
Twitter (@Nocturnus)
⋅
Tweet on Outlaw Group using IRCBot, SSH bruteforce tool, port Scanner, and an XMRIG crypto miner for their hacking operation PerlBot |
2020-09-13
⋅
Twitter (@bartblaze)
⋅
Tweet on Cryakl 2.0.0.0 Cryakl |
2020-09-11
⋅
Twitter (@Arkbird_SOLG)
⋅
Tweet on discovery of a sample Turla SilentMoon |
2020-09-06
⋅
Twitter (@3xp0rtblog)
⋅
Tweet and description of NixScare Stealer NixScare Stealer |
2020-09-03
⋅
Twitter (@Arkbird_SOLG)
⋅
Tweet on development in more_eggs More_eggs |
2020-09-01
⋅
Twitter (@Vishnyak0v)
⋅
Tweet on sample discovery Unidentified 078 (Zebrocy Nim Loader?) |