Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2020-01-01 ⋅ FireEye ⋅ Mandiant, Mitchell Clarke, Tom Hall
Mandiant IR Grab Bag of Attacker Activity
TwoFace CHINACHOPPER HyperBro HyperSSL
2019-12-18 ⋅ US District Court for the Eastern District of Virginia
MICROSOFT CORPORATION, Plaintiff, v. JOHN DOES 1-2, CONTROLLING A COMPUTER NETWORK THEREBY INJURING PLAINTIFF AND ITS CUSTOMERS
BabyShark Kimsuky
2019-12-17 ⋅ Palo Alto Networks Unit 42 ⋅ Jen Miller-Osborn, Mike Harbison
Rancor: Cyber Espionage Group Uses New Custom Malware to Attack Southeast Asia
DDKONG Derusbi KHRAT
2019-11-26 ⋅ ESET Research ⋅ Vladislav Hrčka
Stantinko botnet adds cryptomining to its pool of criminal activities
Stantinko
2019-11-11 ⋅ Virus Bulletin ⋅ Hiroshi Soeda, Shusei Tomonaga, Tomoaki Tani, Wataru Takahashi
APT cases exploiting vulnerabilities in region‑specific software
NodeRAT Emdivi PlugX
2019-09-18 ⋅ JPCERT/CC ⋅ Shusei Tomonaga
Malware Used by BlackTech after Network Intrusion
PLEAD
2019-08-07 ⋅ McAfee ⋅ Chanung Pak, Yukihiro Okutomi
MoqHao Related Android Spyware Targeting Japan and Korea Found on Google Play
SmsAgent
2019-08-05 ⋅ Reversing Labs ⋅ Tomislav Pericin
Catching lateral movement in internal emails
SappyCache
2019-07-09 ⋅ JPCERT/CC ⋅ Tomoaki Tani, Yukako Uchida
Spear Phishing against Cryptocurrency Businesses
CageyChameleon
2019-06-19 ⋅ YouTube (44CON Information Security Conference) ⋅ Kevin O’Reilly
The Malware CAPE: Automated Extraction of Configuration and Payloads from Sophisticated Malware
PlugX
2019-06-03 ⋅ Kindred Security ⋅ Derek Kleinhen
Code Analysis of Basic Cryptomining Malware
RaspberryPiBotnet
2019-05-31 ⋅ Youtube (0verfl0w_) ⋅ 0verfl0w_
Defeating Commercial and Custom Packers like a Pro - VMProtect, ASPack, PECompact, and more
FlawedAmmyy Ramnit
2019-05-30 ⋅ JPCERT/CC ⋅ Shusei Tomonaga
Bug in Malware “TSCookie” - Fails to Read Configuration - (Update)
PLEAD
2019-05-28 ⋅ Palo Alto Networks Unit 42 ⋅ Robert Falcone, Tom Lancaster
Emissary Panda Attacks Middle East Government Sharepoint Servers
CHINACHOPPER HyperSSL
2019-04-06 ⋅ Youtube (hasherezade) ⋅ hasherezade
Unpacking ISFB (including the custom 'PX' format)
ISFB
2019-04-01 ⋅ ⋅ Macnica Networks ⋅ Macnica Networks
OceanLotus Attack on Southeast Asian Automotive Industry
CACTUSTORCH Cobalt Strike
2019-03-28 ⋅ Carbon Black ⋅ CB TAU Threat Intelligence
CryptoMix Clop Ransomware Disables Startup Repair, Removes & Edits Shadow Volume Copies
Clop
2019-03-27 ⋅ Microsoft ⋅ Tom Burt
New steps to protect customers from hacking
APT35 Charming Kitten Cleaver
2019-03-27 ⋅ ReversingLabs ⋅ Tomislav Pericin
Forging the ShadowHammer
shadowhammer
2019-03-19 ⋅ Palo Alto Networks Unit 42 ⋅ Josh Grunzweig, Tom Lancaster
Cardinal RAT Sins Again, Targets Israeli Fin-Tech Firms
EVILNUM Cardinal RAT EVILNUM