Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2020-10-26 ⋅ ThreatConnect ⋅ ThreatConnect Research Team
ThreatConnect Research Roundup: Ryuk and Domains Spoofing ESET and Microsoft
Ryuk
2020-10-20 ⋅ Microsoft ⋅ Tom Burt
An update on disruption of Trickbot
TrickBot
2020-10-12 ⋅ Microsoft ⋅ Tom Burt
New action to combat ransomware ahead of U.S. elections
Ryuk TrickBot
2020-10-12 ⋅ Microsoft ⋅ Microsoft 365 Defender Threat Intelligence Team
Trickbot disrupted
TrickBot
2020-10-08 ⋅ Microsoft ⋅ Dinesh Venkatesan, Microsoft Defender Research Team
Sophisticated new Android malware marks the latest evolution of mobile ransomware
2020-10-06 ⋅ Twitter (@MsftSecIntel) ⋅ Microsoft Security Intelligence
Tweet on TA505 threat actor exploiting Zerologon (CVE-2020-1472) Vulnerability
2020-09-29 ⋅ Microsoft ⋅ Microsoft
Microsoft Digital Defense Report
Emotet IcedID Mailto Maze QakBot REvil RobinHood TrickBot
2020-09-24 ⋅ Microsoft ⋅ Ben Koehl, Joe Hannon
Microsoft Security—detecting empires in the cloud
2020-09-24 ⋅ Microsoft ⋅ Ben Koehl, Joe Hannon, Microsoft Identity Security Team
Microsoft Security—detecting empires in the cloud
CACTUSTORCH LazyCat APT40
2020-09-10 ⋅ Microsoft ⋅ Microsoft Threat Intelligence Center (MSTIC)
STRONTIUM: Detecting new patterns in credential harvesting
APT28
2020-09-10 ⋅ Microsoft ⋅ Tom Burt
New cyberattacks targeting U.S. elections
2020-09-08 ⋅ Microsoft ⋅ Ross Bevington, Yossi Weizman
TeamTNT activity targets Weave Scope deployments
2020-08-27 ⋅ Twitter (@MsftSecIntel) ⋅ Microsoft Security Intelligence
Tweet on Anubis Stealer
Anubis
2020-07-25 ⋅ ⋅ ESTsecurity ⋅ Alyac
[Special Report] Thallium Group sued by Microsoft in the US, threatens 'Fake Striker' APT campaign against South Korea
2020-07-13 ⋅ Microsoft ⋅ Heike Ritter
Become a Microsoft Defender ATP Ninja
2020-07-07 ⋅ Microsoft ⋅ Tom Burt
Microsoft takes legal action against COVID-19-related cybercrime
2020-06-18 ⋅ Microsoft ⋅ Microsoft Threat Protection Intelligence Team
Inside Microsoft Threat Protection: Mapping attack chains from cloud to endpoint (APT33/HOLMIUM)
POWERTON
2020-06-17 ⋅ Twitter (@MsftSecIntel) ⋅ Microsoft Security Intelligence
A tweet thread on TA505 using CAPTCHA to avoid detection and infecting victims with FlawedGrace
FlawedGrace
2020-06-16 ⋅ Microsoft ⋅ Microsoft Threat Protection Intelligence Team
Exploiting a crisis: How cybercriminals behaved during the outbreak
2020-06-10 ⋅ Microsoft ⋅ Yossi Weizman
Misconfigured Kubeflow workloads are a security risk