Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2020-07-14 ⋅ SophosLabs Uncut ⋅ Markel Picado, Sean Gallagher
RATicate upgrades “RATs as a Service” attacks with commercial “crypter”
LokiBot BetaBot CloudEyE NetWire RC
2020-07-13 ⋅ Github (1d8) ⋅ 1d8
Remcos RAT Macro Dropper Doc
Remcos
2020-07-11 ⋅ Advanced Intelligence ⋅ Vitali Kremez
TrickBot Group Launches Test Module Alerting on Fraud Activity
TrickBot
2020-07-10 ⋅ Vice ⋅ Joseph Cox
The Secret Service Tried to Catch a Hacker With a Malware Booby-Trap
Dharma
2020-07-10 ⋅ FBI ⋅ FBI
Wanted poster: CHINA MSS GUANGDONG STATE SECURITY DEPARTMENT HACKERS
BRONZE SPRING
2020-07-10 ⋅ ByteAtlas ⋅ Daniel Plohmann
Knowledge Fragment: Casting Sandbox Necromancy on DADSTACHE
DADSTACHE
2020-07-09 ⋅ VMRay ⋅ Pascal Brackmann
Threat Bulletin: Dissecting GuLoader’s Evasion Techniques
CloudEyE
2020-07-09 ⋅ Github (krautface) ⋅ krautface
Gist with observed grelos skimmer
grelos
2020-07-09 ⋅ 360 netlab ⋅ Alex Turing, Hui Wang
An Update for a Very Active DDos Botnet: Moobot
MooBot
2020-07-08 ⋅ ThaiCERT ⋅ ThaiCERT
Threat Group Cards: A Threat Actor Encyclopedia
TA516 TA547 TA554 TA555
2020-07-08 ⋅ Bitdefender ⋅ Bogdan Botezatu, Janos Gergo Szeles
Kingminer –a Crypto-Jacking Botnet Under the Scope
Kingminer
2020-07-08 ⋅ COLUMBIA | SIPA ⋅ Jennifer Keltz, John Patrick Dees, John Sakellariadis, Katherine von Ofenheim, Lan Pelekis, Matthew Armelli, Max Egar, Neal Pollard, Stuart Caudill, Vipratap Vikram Singh
Named But Hardly Shamed: What is the Impact of Information Disclosures on an APT Operations?
2020-07-08 ⋅ Medium (@sevdraven) ⋅ Sébastien Larinier
How to unpack Chinoxy backdoor and decipher the configuration of the backdoor
Chinoxy
2020-07-08 ⋅ VMWare Carbon Black ⋅ Brian Baskin
TAU Threat Discovery: Conti Ransomware
Conti
2020-07-07 ⋅ MWLab ⋅ Ladislav Bačo
Cobalt Strike stagers used by FIN6
Cobalt Strike
2020-07-07 ⋅ GEMINI
Full list of all the 570+ sites that the Keeper gang hacked since April 2017
magecart
2020-07-07 ⋅ Sentinel LABS ⋅ Jason Reaves
Breaking EvilQuest | Reversing A Custom macOS Ransomware File Encryption Routine
EvilQuest
2020-07-07 ⋅ Microsoft ⋅ Tom Burt
Microsoft takes legal action against COVID-19-related cybercrime
2020-07-06 ⋅ Sansec ⋅ Sansec Threat Research Team
North Korean hackers implicated in stealing from US and European shoppers
magecart
2020-07-05 ⋅ Council on Foreign Relations ⋅ Cyber Operations Tracker
APT 41
APT41