Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-02-03 ⋅ Sophos Managed Threat Response (MTR) ⋅ Greg Iddon
MTR casebook: Uncovering a backdoor implant in a SolarWinds Orion server
RagnarLocker
2021-02-03 ⋅ Vice Motherboard ⋅ Joseph Cox, Lorenzo Franceschi-Bicchierai
A Spyware Vendor Seemingly Made a Fake WhatsApp to Hack Targets
2021-02-03 ⋅ Avast Decoded ⋅ Jan Rubín, Jan Vojtěšek
Backdoored Browser Extensions Hid Malicious Traffic in Analytics Requests
2021-02-03 ⋅ Stratosphere Lab ⋅ Kamila Babayeva, Sebastian García
Dissecting a RAT. Analysis of DroidJack v4.4 RAT network traffic.
DroidJack
2021-02-02 ⋅ Malwarebytes ⋅ Jérôme Segura
Credit card skimmer piggybacks on Magento 1 hacking spree
2021-02-02 ⋅ The Wall Street Journal ⋅ Robert McMillan
Hackers Lurked in SolarWinds Email System for at Least 9 Months, CEO Says
2021-02-02 ⋅ Reuters ⋅ Christopher Bing, Jack Stubbs, Joseph Menn, Raphael Satter
Exclusive: Suspected Chinese hackers used SolarWinds bug to spy on U.S. payroll agency - sources
2021-02-02 ⋅ Twitter (@TheDFIRReport) ⋅ The DFIR Report
Tweet on recent dridex post infection activity
Cobalt Strike Dridex
2021-02-02 ⋅ Committee to Protect Journalists ⋅ Madeline Earp
How Vietnam-based hacking operation OceanLotus targets journalists
Cobalt Strike
2021-02-02 ⋅ SUCURI ⋅ Denis Sinegubko
Whitespace Steganography Conceals Web Shell in PHP Malware
2021-02-02 ⋅ ESET Research ⋅ Ignacio Sanmillan, Marc-Etienne M.Léveillé
Kobalos – A complex Linux threat to high performance computing infrastructure
Kobalos
2021-02-01 ⋅ Silent Push ⋅ Martijn Grooten
Pivoting: finding malware domains without seeing malicious activity
Hancitor
2021-02-01 ⋅ Massachusetts Government ⋅ Massachusetts Government
Cybersecurity Advisory for Public Water Suppliers
2021-02-01 ⋅ Dancho Danchev's Blog ⋅ Dancho Danchev's Blog
Profiling a Currently Active High-Profile Cybercriminals Portfolio of Ransomware-Themed Extortion Email Addresses - Part Two
2021-02-01 ⋅ ESET Research ⋅ Ignacio Sanmillan, Matthieu Faou
Operation NightScout: Supply‑chain attack targets online gaming in Asia
Ghost RAT NoxPlayer Poison Ivy Red Dev 17
2021-02-01 ⋅ AhnLab ⋅ ASEC Analysis Team
BlueCrab ransomware, CobaltStrike hacking tool installed in corporate environment
Cobalt Strike REvil
2021-02-01 ⋅ Twitter (@IntelAdvanced) ⋅ Advanced Intelligence
Tweet on Active Directory Exploitation by RYUK "one" group
Ryuk
2021-02-01 ⋅ pkb1s.github.io ⋅ Petros Koutroumpis
Relay Attacks via Cobalt Strike Beacons
Cobalt Strike
2021-02-01 ⋅ ⋅ Microstep Intelligence Bureau ⋅ Microstep online research response team
Analysis of the attack activity organized by Konni APT using the topic of North Korean epidemic materials as bait
Amadey
2021-02-01 ⋅ Microsoft ⋅ Microsoft 365 Defender Threat Intelligence Team
What tracking an attacker email infrastructure tells us about persistent cybercriminal operations
Dridex Emotet Makop Ransomware SmokeLoader TrickBot