Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-05-04 ⋅ Twitter (@ESETresearch) ⋅ Twitter (@ESETresearch)
Twitter thread on code similarity analysis, focussing on IsaacWiper and recent Cluster25 publication
IsaacWiper
2022-05-04 ⋅ Inky ⋅ Roger Kay
Fresh Phish: Britain’s National Health Service Infected by Massive Phishing Campaign
2022-05-04 ⋅ Sophos ⋅ Andreas Klopsch
Attacking Emotet’s Control Flow Flattening
Emotet
2022-05-03 ⋅ Google ⋅ Billy Leonard
Update on cyber activity in Eastern Europe
Callisto
2022-05-03 ⋅ Silent Push ⋅ Silent Push
Subdomain Takeovers and 1.1 million “dangling” risks
2022-05-03 ⋅ Fortinet ⋅ Gergely Revay
Unpacking Python Executables on Windows and Linux
2022-05-03 ⋅ Recorded Future ⋅ Insikt Group
SOLARDEFLECTION C2 Infrastructure Used by NOBELIUM in Company Brand Misuse
Cobalt Strike
2022-05-03 ⋅ ⋅ AhnLab ⋅ ASEC
Backdoors disguised as document editing and messenger programs (*.chm)
2022-05-03 ⋅ Minerva Labs ⋅ Natalie Zargarov
A new BluStealer Loader Uses Direct Syscalls to Evade EDRs
BluStealer
2022-05-03 ⋅ Google ⋅ Billy Leonard, Google Threat Analysis Group
Update on cyber activity in Eastern Europe
Curious Gorge
2022-05-03 ⋅ Recorded Future ⋅ Insikt Group®
SOLARDEFLECTION C2 Infrastructure Used by NOBELIUM in Company Brand Misuse
Cobalt Strike EnvyScout
2022-05-03 ⋅ Trellix ⋅ Christiaan Beek
The Hermit Kingdom’s Ransomware play
VHD Ransomware
2022-05-03 ⋅ Talos Intelligence ⋅ JON MUNSHAW
Conti and Hive ransomware operations: What we learned from these groups' victim chats
Conti Hive
2022-05-03 ⋅ Cisco ⋅ JAIME FILSON, Kendall McKay, Paul Eubanks.
Conti and Hive ransomware operations: Leveraging victim chats for insights
Conti Hive
2022-05-03 ⋅ Zscaler ⋅ Brett Stone-Gross, Javier Vicente
Analysis of BlackByte Ransomware's Go-Based Variants
BlackByte
2022-05-03 ⋅ Cluster25 ⋅ Cluster25
The Strange Link Between A Destructive Malware And A Ransomware-Gang Linked Custom Loader: IsaacWiper Vs Vatet
Cobalt Strike IsaacWiper PyXie
2022-05-02 ⋅ cocomelonc ⋅ cocomelonc
Malware development: persistence - part 3. COM DLL hijack. Simple C++ example
Agent.BTZ Ave Maria Konni Mosquito TurlaRPC
2022-05-02 ⋅ eSentire ⋅ eSentire Threat Response Unit (TRU)
AsyncRAT Activity
AsyncRAT
2022-05-02 ⋅ Maurice's Blog ⋅ Maurice Heumann
Detecting Hypervisor-assisted Hooking
2022-05-02 ⋅ LIFARS ⋅ Vlad Pasca
A Deep Dive into AvosLocker Ransomware
AvosLocker