Click here to download all references as Bib-File.•
2022-04-27
⋅
Trendmicro
⋅
IOCs for Earth Berberoka - MacOS oRAT Earth Berberoka |
2022-04-27
⋅
Trendmicro
⋅
IOCs for Earth Berberoka Earth Berberoka |
2022-04-27
⋅
Trendmicro
⋅
Operation Gambling Puppet reptile oRAT AsyncRAT Cobalt Strike DCRat Ghost RAT PlugX Quasar RAT Trochilus RAT Earth Berberoka |
2022-04-27
⋅
Sentinel LABS
⋅
LockBit Ransomware Side-loads Cobalt Strike Beacon with Legitimate VMware Utility Cobalt Strike LockBit BRONZE STARLIGHT |
2022-04-27
⋅
Bitdefender
⋅
RedLine Stealer Resurfaces in Fresh RIG Exploit Kit Campaign RedLine Stealer |
2022-04-27
⋅
Binary Defense
⋅
Detecting Ransomware’s Stealthy Boot Configuration Edits |
2022-04-27
⋅
CYBER GEEKS All Things Infosec
⋅
Reverse Engineering PsExec for fun and knowledge |
2022-04-27
⋅
eSentire
⋅
eSentire Threat Intelligence Malware Analysis: SolarMarker solarmarker |
2022-04-27
⋅
⋅
ANSSI
⋅
LE GROUPE CYBERCRIMINEL FIN7 Bateleur BELLHOP Griffon SQLRat POWERSOURCE Andromeda BABYMETAL BlackCat BlackMatter BOOSTWRITE Carbanak Cobalt Strike DNSMessenger Dridex DRIFTPIN Gameover P2P MimiKatz Murofet Qadars Ranbyus SocksBot |
2022-04-27
⋅
Stairwell
⋅
The origin story of APT32 macros: The StrikeSuit Gift that keeps giving |
2022-04-27
⋅
Cybleinc
⋅
Emotet Returns With New TTPs And Delivers .Lnk Files To Its Victims Emotet |
2022-04-27
⋅
Zscaler
⋅
Targeted attack on Thailand Pass customers delivers AsyncRAT AsyncRAT |
2022-04-27
⋅
Microsoft
⋅
Special Report: Ukraine An overview of Russia’s cyberattack activity in Ukraine CaddyWiper DoubleZero HermeticWiper INDUSTROYER2 IsaacWiper PartyTicket WhisperGate |
2022-04-27
⋅
Medium elis531989
⋅
The chronicles of Bumblebee: The Hook, the Bee, and the Trickbot connection BumbleBee TrickBot |
2022-04-27
⋅
ESET Research
⋅
A lookback under the TA410 umbrella: Its cyberespionage TTPs and activity FlowCloud Lookback Witchetty |
2022-04-27
⋅
BleepingComputer
⋅
New Black Basta ransomware springs into action with a dozen breaches Black Basta |
2022-04-27
⋅
Mandiant
⋅
Assembling the Russian Nesting Doll: UNC2452 Merged into APT29 Cobalt Strike Raindrop SUNBURST TEARDROP |
2022-04-27
⋅
CISA
⋅
Alert (AA22-117A) 2021 Top Routinely Exploited Vulnerabilities |
2022-04-27
⋅
Sentinel LABS
⋅
LockBit Ransomware Side-loads Cobalt Strike Beacon with Legitimate VMware Utility Cobalt Strike LockBit |
2022-04-27
⋅
Nozomi Networks
⋅
Industroyer2: Nozomi Networks Labs Analyzes the IEC 104 Payload INDUSTROYER2 |