Click here to download all references as Bib-File.•
| 2022-05-09
⋅
Blackberry
⋅
Dirty Deeds Done Dirt Cheap: Russian RAT Offers Backdoor Bargains DCRat NjRAT |
| 2022-05-09
⋅
Microsoft
⋅
Ransomware-as-a-service: Understanding the cybercrime gig economy and how to protect yourself AnchorDNS BlackCat BlackMatter Conti DarkSide HelloKitty Hive LockBit REvil FAKEUPDATES Griffon ATOMSILO BazarBackdoor BlackCat BlackMatter Blister Cobalt Strike Conti DarkSide Emotet FiveHands Gozi HelloKitty Hive IcedID ISFB JSSLoader LockBit LockFile Maze NightSky Pandora Phobos Phoenix Locker PhotoLoader QakBot REvil Rook Ryuk SystemBC TrickBot WastedLocker BRONZE STARLIGHT |
| 2022-05-09
⋅
Secureworks
⋅
REvil Development Adds Confidence About GOLD SOUTHFIELD Reemergence REvil |
| 2022-05-09
⋅
TEAMT5
⋅
Hiding in Plain Sight: Obscuring C2s by Abusing CDN Services Cobalt Strike |
| 2022-05-05
⋅
Malwarebytes Labs
⋅
Nigerian Tesla: 419 scammer gone malware distributor unmasked Agent Tesla |
| 2022-05-05
⋅
Blackberry
⋅
Threat Thursday: ZingoStealer – The Cost of “Free” ZingoStealer |
| 2022-04-29
⋅
Team Cymru
⋅
Sliver Case Study: Assessing Common Offensive Security Tools The Use of the Sliver C2 Framework for Malicious Purposes Sliver |
| 2022-04-28
⋅
Blackberry
⋅
Threat Thursday: BoratRAT Borat RAT |
| 2022-04-27
⋅
Secureworks
⋅
BRONZE PRESIDENT Targets Russian Speakers with Updated PlugX DOPLUGS |
| 2022-04-27
⋅
Symantec
⋅
Stonefly: North Korea-linked Spying Operation Continues to Hit High-value Targets Dtrack VSingle |
| 2022-04-26
⋅
AhnLab
⋅
New Malware of Lazarus Threat Actor Group Exploiting INITECH Process Racket Downloader wAgentTea |
| 2022-04-26
⋅
Zscaler
⋅
A "Naver"-ending game of Lazarus APT fengine |
| 2022-04-23
⋅
F5
⋅
Cryptojacking on the Fly: TeamTNT Using NVIDIA Drivers to Mine Cryptocurrency |
| 2022-04-21
⋅
Blackberry
⋅
Threat Thursday: BlackGuard Infostealer Rises from Russian Underground Markets BlackGuard |
| 2022-04-21
⋅
Secureworks
⋅
GOLD ULRICK Continues Conti Operations Despite Public Disclosures Conti Conti |
| 2022-04-20
⋅
Symantec
⋅
Shuckworm: Espionage Group Continues Intense Campaign Against Ukraine Pteranodon |
| 2022-04-18
⋅
⋅
ASEC
⋅
A new type of malware from the Lazarus attack group that exploits the INITECH process. |
| 2022-04-17
⋅
Malcat
⋅
Reversing a NSIS dropper using quick and dirty shellcode emulation Loki Password Stealer (PWS) |
| 2022-04-15
⋅
splunk
⋅
STRT-TA03 CPE - Destructive Software AcidRain CyclopsBlink |
| 2022-04-14
⋅
Symantec
⋅
Lazarus Targets Chemical Sector Racket Downloader |