Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2020-09-24 ⋅ Microsoft ⋅ Ben Koehl, Joe Hannon, Microsoft Identity Security Team
Microsoft Security—detecting empires in the cloud
CACTUSTORCH LazyCat APT40
2020-09-10 ⋅ Microsoft ⋅ Microsoft Threat Intelligence Center (MSTIC)
STRONTIUM: Detecting new patterns in credential harvesting
APT28
2020-09-10 ⋅ Microsoft ⋅ Tom Burt
New cyberattacks targeting U.S. elections
2020-09-08 ⋅ Microsoft ⋅ Ross Bevington, Yossi Weizman
TeamTNT activity targets Weave Scope deployments
2020-08-27 ⋅ Twitter (@MsftSecIntel) ⋅ Microsoft Security Intelligence
Tweet on Anubis Stealer
Anubis
2020-07-25 ⋅ ⋅ ESTsecurity ⋅ Alyac
[Special Report] Thallium Group sued by Microsoft in the US, threatens 'Fake Striker' APT campaign against South Korea
2020-07-13 ⋅ Microsoft ⋅ Heike Ritter
Become a Microsoft Defender ATP Ninja
2020-07-07 ⋅ Microsoft ⋅ Tom Burt
Microsoft takes legal action against COVID-19-related cybercrime
2020-06-18 ⋅ Microsoft ⋅ Microsoft Threat Protection Intelligence Team
Inside Microsoft Threat Protection: Mapping attack chains from cloud to endpoint (APT33/HOLMIUM)
POWERTON
2020-06-17 ⋅ Twitter (@MsftSecIntel) ⋅ Microsoft Security Intelligence
A tweet thread on TA505 using CAPTCHA to avoid detection and infecting victims with FlawedGrace
FlawedGrace
2020-06-16 ⋅ Microsoft ⋅ Microsoft Threat Protection Intelligence Team
Exploiting a crisis: How cybercriminals behaved during the outbreak
2020-06-10 ⋅ Microsoft ⋅ Yossi Weizman
Misconfigured Kubeflow workloads are a security risk
2020-06-09 ⋅ Microsoft ⋅ Rob Mead, Tom McElroy
Web shell threat hunting with Azure Sentinel and Microsoft Threat Protection
2020-05-28 ⋅ Bleeping Computer ⋅ Ax Sharma
Microsoft IIS servers hacked by Blue Mockingbird to mine Monero
2020-04-28 ⋅ Microsoft ⋅ Microsoft Threat Protection Intelligence Team
Ransomware groups continue to target healthcare, critical services; here’s how to reduce risk
LockBit Mailto Maze MedusaLocker Paradise RagnarLocker REvil RobinHood
2020-04-03 ⋅ Bleeping Computer ⋅ Sergiu Gatlan
Microsoft: Emotet Took Down a Network by Overheating All Computers
Emotet
2020-03-23 ⋅ Microsoft ⋅ Microsoft Defender ATP Research Team
Latest Astaroth living-off-the-land attacks are even more invisible but not less observable
Astaroth
2020-03-10 ⋅ BitSight ⋅ Valter Santos
Joint Effort with Microsoft to Disrupt Massive Criminal Botnet Necurs
Necurs
2020-03-10 ⋅ Microsoft ⋅ Tom Burt
New action to disrupt world’s largest online criminal network
Necurs
2020-03-05 ⋅ Microsoft ⋅ Microsoft Threat Protection Intelligence Team
Human-operated ransomware attacks: A preventable disaster
Dharma DoppelPaymer Dridex EternalPetya Gandcrab Hermes LockerGoga MegaCortex MimiKatz REvil RobinHood Ryuk SamSam TrickBot WannaCryptor PARINACOTA