Click here to download all references as Bib-File.•
2022-04-06
⋅
Github (infinitumlabs)
⋅
Karakurt Hacking Team Indicators of Compromise (IOC) Cobalt Strike |
2022-04-06
⋅
Medium mars0x
⋅
WannaHusky Malware Analysis w/ YARA + TTPs WannaHusky |
2022-04-06
⋅
ESET Research
⋅
Fake e‑shops on the prowl for banking credentials using Android malware Unidentified APK 008 |
2022-04-06
⋅
Bleeping Computer
⋅
US disrupts Russian Cyclops Blink botnet before being used in attacks CyclopsBlink |
2022-04-05
⋅
Symantec
⋅
Cicada: Chinese APT Group Widens Targeting in Recent Espionage Activity MimiKatz APT10 |
2022-04-05
⋅
NetbyteSEC
⋅
RTF template injection sample targeting Malaysia |
2022-04-05
⋅
Trend Micro
⋅
Thwarting Loaders: From SocGholish to BLISTER’s LockBit Payload Blister LockBit |
2022-04-05
⋅
Malwarebytes Labs
⋅
Colibri Loader combines Task Scheduler and PowerShell in clever persistence technique Colibri Loader Mars Stealer |
2022-04-05
⋅
eSentire
⋅
eSentire Threat Intelligence Malware Analysis: HeaderTip HeaderTip |
2022-04-05
⋅
eSentire
⋅
eSentire Threat Intelligence Malware Analysis: DoubleZero DoubleZero |
2022-04-05
⋅
Trend Micro
⋅
Thwarting Loaders: From SocGholish to BLISTER’s LockBit Payload FAKEUPDATES Blister LockBit |
2022-04-05
⋅
Trend Micro
⋅
Thwarting Loaders: From SocGholish to BLISTER’s LockBit Payload (IoCs) FAKEUPDATES Blister LockBit |
2022-04-05
⋅
US Department of Justice
⋅
Justice Department Investigation Leads to Shutdown of Largest Online Darknet Marketplace |
2022-04-05
⋅
US Department of Justice
⋅
Indictment of Dmitry Olegovich Pavlov in connection with his operation and administration of the servers used to run Hydra |
2022-04-05
⋅
Medium jsecurity101
⋅
Bypassing Access Mask Auditing Strategies |
2022-04-05
⋅
AhnLab
⋅
Malicious Word Documents Using MS Media Player (Impersonating AhnLab) |
2022-04-05
⋅
Bundeskriminalamt
⋅
Illegal darknet marketplace "Hydra Market" shut down |
2022-04-05
⋅
cyble
⋅
A New Info Stealer Targeting Over 30 Browsers Lightning Stealer |
2022-04-05
⋅
Expel
⋅
Incident report: From CLI to console, chasing an attacker in AWS |
2022-04-05
⋅
⋅
Cert-UA
⋅
Information on cyberattacks aimed at gaining access to Telegram accounts (CERT-UA#4360) UAC-0094 |