Click here to download all references as Bib-File.•
2025-01-21
⋅
Knownsec
⋅
Love and hate under war: The GamaCopy organization, which imitates the Russian Gamaredon, uses military — related bait to launch attacks on Russia GamaCopy |
2025-01-21
⋅
Seqrite
⋅
Silent Lynx APT Targets Various Entities Across Kyrgyzstan & Neighbouring Nations Unidentified PS 005 (Telegram Bot) |
2025-01-20
⋅
⋅
JPCERT/CC
⋅
APT actor classification “addiction” - Practical issues of attribution seen in Lazarus subgroup classification |
2025-01-20
⋅
Medium walmartglobaltech
⋅
Qbot is Back.Connect ReedBed UNC4393 |
2025-01-19
⋅
cocomelonc
⋅
Malware development trick 44: Stealing data via legit GitHub API. Simple C example. OceanLotus BitRAT RecordBreaker |
2025-01-17
⋅
Twitter (@Unit42_Intel)
⋅
Tweet about affiliates of DarkScorpius using Social Engineering via MS Teams UNC4393 |
2025-01-16
⋅
Youtube (Eric Parker)
⋅
The Virus That Draws "I Am Sorry !!!!!" Over All JPEG Files Grenam |
2025-01-16
⋅
cocomelonc
⋅
Malware and cryptography 39 - encrypt/decrypt payload via DES-like cipher. Simple C example. |
2025-01-15
⋅
⋅
CTFIOT
⋅
Article 113: One of the Russian-Ukrainian cyberwars, a review of the first major blackout in Ukraine caused by the Sandworm APT organization KillDisk |
2025-01-15
⋅
⋅
Habr
⋅
F.A.C.C.T. found new attacks of pro-Ukrainian cyber spies Sticky Werewolf Ozone RAT |
2025-01-14
⋅
Infoblox
⋅
One Mikro Typo: How a simple DNS misconfiguration enables malware delivery by a Russian botnet |
2025-01-14
⋅
Vertex
⋅
More Than Malware Families: Retooling Our Approach to Tracking Software |
2025-01-14
⋅
The Record
⋅
Russia's largest platform for state procurement hit by cyberattack from pro-Ukraine group |
2025-01-14
⋅
RedSense
⋅
From Royal to BlackSuit BlackSuit Royal Ransom Royal Ransom BlackSuit Royal Ransom |
2025-01-14
⋅
Department of Justice
⋅
Justice Department and FBI Conduct International Operation to Delete Malware Used by China-Backed Hackers PlugX |
2025-01-13
⋅
Sekoia
⋅
Double-Tap Campaign: Russia-nexus APT possibly related to APT28 conducts cyber espionage on Central Asia and Kazakhstan diplomatic relations HATVIBE |
2025-01-13
⋅
Halcyon
⋅
Abusing AWS Native Services: Ransomware Encrypting S3 Buckets with SSE-C Codefinger |
2025-01-13
⋅
Sekoia
⋅
Double-Tap Campaign: Russia-nexus APT possibly related to APT28 conducts cyber espionage on Central Asia and Kazakhstan diplomatic relations HATVIBE |
2025-01-10
⋅
Check Point Research
⋅
FunkSec – Alleged Top Ransomware Group Powered by AI FunkSec |
2025-01-09
⋅
cyble
⋅
HexaLocker V2: Skuld Stealer Paving the Way prior to Encryption HexaLocker Skuld |