Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-04-06 ⋅ Github (infinitumlabs) ⋅ Arda Büyükkaya
Karakurt Hacking Team Indicators of Compromise (IOC)
Cobalt Strike
2022-04-06 ⋅ Medium mars0x ⋅ Mars
WannaHusky Malware Analysis w/ YARA + TTPs
WannaHusky
2022-04-06 ⋅ ESET Research ⋅ Lukáš Štefanko
Fake e‑shops on the prowl for banking credentials using Android malware
Unidentified APK 008
2022-04-06 ⋅ Bleeping Computer ⋅ Sergiu Gatlan
US disrupts Russian Cyclops Blink botnet before being used in attacks
CyclopsBlink
2022-04-05 ⋅ Trend Micro ⋅ Abdelrhman Sharshar, Earle Earnshaw, Ian Kenefick, Lucas Silva, Mohamed Fahmy, Ryan Maglaque
Thwarting Loaders: From SocGholish to BLISTER’s LockBit Payload
Blister LockBit
2022-04-05 ⋅ Malwarebytes Labs ⋅ Ankur Saini, Hossein Jazi, Jérôme Segura
Colibri Loader combines Task Scheduler and PowerShell in clever persistence technique
Colibri Loader Mars Stealer
2022-04-05 ⋅ Trend Micro ⋅ Abdelrhman Sharshar, Earle Maui Earnshaw, Ian Kenefick, Lucas Silva, Mohamed Fahmy, Ryan Maglaque
Thwarting Loaders: From SocGholish to BLISTER’s LockBit Payload
FAKEUPDATES Blister LockBit
2022-04-05 ⋅ Trend Micro ⋅ Abdelrhman Sharshar, Earle Maui Earnshaw, Ian Kenefick, Lucas Silva, Mohamed Fahmy, Ryan Maglaque
Thwarting Loaders: From SocGholish to BLISTER’s LockBit Payload (IoCs)
FAKEUPDATES Blister LockBit
2022-04-05 ⋅ US Department of Justice ⋅ Department of Justice
Justice Department Investigation Leads to Shutdown of Largest Online Darknet Marketplace
2022-04-05 ⋅ Medium jsecurity101 ⋅ Jonathan Johnson
Bypassing Access Mask Auditing Strategies
2022-04-05 ⋅ Bundeskriminalamt ⋅ BKA (Bundeskriminalamt)
Illegal darknet marketplace "Hydra Market" shut down
2022-04-05 ⋅ Expel ⋅ Brian Bahtiarian, Britton Manahan, David Blanton, Kyle Pellett
Incident report: From CLI to console, chasing an attacker in AWS
2022-04-05 ⋅ ⋅ Cert-UA ⋅ Cert-UA
Information on cyberattacks aimed at gaining access to Telegram accounts (CERT-UA#4360)
UAC-0094
2022-04-05 ⋅ Secureworks ⋅ Counter Threat Unit ResearchTeam
Azure Active Directory Exposes Internal Information
2022-04-05 ⋅ Cisco Talos ⋅ Alex Karkins, Edmund Brumaghin
Threat Spotlight: AsyncRAT campaigns feature new version of 3LOSH crypter
AsyncRAT LimeRAT
2022-04-05 ⋅ Bleeping Computer ⋅ Ionut Ilascu
Chinese hackers abuse VLC Media Player to launch malware loader
SodaMaster
2022-04-05 ⋅ Government of United Kingdom ⋅ Government of United Kingdom
Russia's FSB malign activity: factsheet
ENERGETIC BEAR
2022-04-05 ⋅ CitizenLab ⋅ Bill Marczak, CitizenLab, Front Line Defenders, Mohammed Al-Maskati, Ron Deibert, Siena Anstis
Peace through Pegasus Jordanian Human Rights Defenders and Journalists Hacked with Pegasus Spyware
Chrysaor
2022-04-05 ⋅ Morphisec ⋅ Michael Dereviashkin
New Analysis: The CaddyWiper Malware Attacking Ukraine
CaddyWiper
2022-04-04 ⋅ ⋅ Cert-UA ⋅ Cert-UA
Cyber attack by the UAC-0010 group (Armageddon) on state institutions of the European Union countries (CERT-UA#4334)
Gamaredon Group