Click here to download all references as Bib-File.•
2022-07-13
⋅
Trellix
⋅
Targeted Attack on Government Agencies AsyncRAT LimeRAT |
2022-07-13
⋅
Malwarebytes Labs
⋅
Cobalt Strikes again: UAC-0056 continues to target Ukraine in its latest campaign Cobalt Strike |
2022-07-12
⋅
Team Cymru
⋅
An Analysis of Infrastructure linked to the Hagga Threat Actor Hagga |
2022-07-12
⋅
Cyren
⋅
Example Analysis of Multi-Component Malware Emotet Formbook |
2022-07-12
⋅
Google
⋅
TAG Bulletin: Q2 2022 |
2022-07-12
⋅
Microsoft
⋅
From cookie theft to BEC: Attackers use AiTM phishing sites as entry point to further financial fraud |
2022-07-12
⋅
Team Cymru
⋅
An Analysis of Infrastructure linked to the Hagga Threat Actor Agent Tesla |
2022-07-12
⋅
Artik Blue
⋅
Malware analysis with IDA/Radare2 - Multiple unpacking (Ramnit worm) Ramnit |
2022-07-12
⋅
Fortinet
⋅
Spoofed Saudi Purchase Order Drops GuLoader – Part 2 CloudEyE |
2022-07-12
⋅
Zscaler
⋅
Rise in Qakbot attacks traced to evolving threat techniques QakBot |
2022-07-12
⋅
cyble
⋅
New Ransomware Groups On The Rise: “RedAlert,” LILITH And 0mega Leading A Wave Of Ransomware Campaigns RedAlert Ransomware Lilith |
2022-07-12
⋅
Palo Alto Networks Unit 42
⋅
ChromeLoader: New Stubborn Malware Campaign ChromeBack |
2022-07-11
⋅
Twitter (@cglyer)
⋅
Tweet on LAPSUS$/DEV-0537 Storm-0829 |
2022-07-11
⋅
ASEC
⋅
AppleSeed Disguised as Purchase Order and Request Form Being Distributed Appleseed |
2022-07-11
⋅
⋅
Cert-UA
⋅
UAC-0056 attack on Ukrainian state organizations using Cobalt Strike Beacon (CERT-UA#4941) Cobalt Strike |
2022-07-11
⋅
BBC
⋅
Predatory Sparrow: Who are the hackers who say they started a fire in Iran? Predatory Sparrow |
2022-07-11
⋅
The DFIR Report
⋅
SELECT XMRig FROM SQLServer Bondnet |
2022-07-11
⋅
Soc Investigation
⋅
Threat Actors Delivers New Rozena backdoor with Follina Bug – Detection & Response Rozena |
2022-07-11
⋅
Security Affairs
⋅
Anubis Networks is back with new C2 server Anubis |
2022-07-10
⋅
Seguranca Informatica
⋅
Anubis Network is back with new C2 server |