Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-04-05 ⋅ Malwarebytes Labs ⋅ Ankur Saini, Hossein Jazi, Jérôme Segura
Colibri Loader combines Task Scheduler and PowerShell in clever persistence technique
Colibri Loader Mars Stealer
2022-04-05 ⋅ eSentire ⋅ eSentire Threat Response Unit (TRU)
eSentire Threat Intelligence Malware Analysis: HeaderTip
HeaderTip
2022-04-05 ⋅ eSentire ⋅ eSentire Threat Response Unit (TRU)
eSentire Threat Intelligence Malware Analysis: DoubleZero
DoubleZero
2022-04-05 ⋅ Trend Micro ⋅ Abdelrhman Sharshar, Earle Maui Earnshaw, Ian Kenefick, Lucas Silva, Mohamed Fahmy, Ryan Maglaque
Thwarting Loaders: From SocGholish to BLISTER’s LockBit Payload
FAKEUPDATES Blister LockBit
2022-04-05 ⋅ Trend Micro ⋅ Abdelrhman Sharshar, Earle Maui Earnshaw, Ian Kenefick, Lucas Silva, Mohamed Fahmy, Ryan Maglaque
Thwarting Loaders: From SocGholish to BLISTER’s LockBit Payload (IoCs)
FAKEUPDATES Blister LockBit
2022-04-05 ⋅ US Department of Justice ⋅ Department of Justice
Justice Department Investigation Leads to Shutdown of Largest Online Darknet Marketplace
2022-04-05 ⋅ US Department of Justice ⋅ Department of Justice
Indictment of Dmitry Olegovich Pavlov in connection with his operation and administration of the servers used to run Hydra
2022-04-05 ⋅ Medium jsecurity101 ⋅ Jonathan Johnson
Bypassing Access Mask Auditing Strategies
2022-04-05 ⋅ AhnLab ⋅ ASEC Analysis Team
Malicious Word Documents Using MS Media Player (Impersonating AhnLab)
2022-04-05 ⋅ Bundeskriminalamt ⋅ BKA (Bundeskriminalamt)
Illegal darknet marketplace "Hydra Market" shut down
2022-04-05 ⋅ cyble ⋅ Cyble
A New Info Stealer Targeting Over 30 Browsers
Lightning Stealer
2022-04-05 ⋅ Expel ⋅ Brian Bahtiarian, Britton Manahan, David Blanton, Kyle Pellett
Incident report: From CLI to console, chasing an attacker in AWS
2022-04-05 ⋅ ⋅ Cert-UA ⋅ Cert-UA
Information on cyberattacks aimed at gaining access to Telegram accounts (CERT-UA#4360)
UAC-0094
2022-04-05 ⋅ Secureworks ⋅ Counter Threat Unit ResearchTeam
Azure Active Directory Exposes Internal Information
2022-04-05 ⋅ Cisco Talos ⋅ Alex Karkins, Edmund Brumaghin
Threat Spotlight: AsyncRAT campaigns feature new version of 3LOSH crypter
AsyncRAT LimeRAT
2022-04-05 ⋅ Bleeping Computer ⋅ Ionut Ilascu
Chinese hackers abuse VLC Media Player to launch malware loader
SodaMaster
2022-04-05 ⋅ Symantec ⋅ Threat Hunter Team
Cicada: Chinese APT Group Widens Targeting in Recent Espionage Activity
MimiKatz SodaMaster
2022-04-05 ⋅ Government of United Kingdom ⋅ Government of United Kingdom
Russia's FSB malign activity: factsheet
ENERGETIC BEAR
2022-04-05 ⋅ CitizenLab ⋅ Bill Marczak, CitizenLab, Front Line Defenders, Mohammed Al-Maskati, Ron Deibert, Siena Anstis
Peace through Pegasus Jordanian Human Rights Defenders and Journalists Hacked with Pegasus Spyware
Chrysaor
2022-04-05 ⋅ Morphisec ⋅ Michael Dereviashkin
New Analysis: The CaddyWiper Malware Attacking Ukraine
CaddyWiper