Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-08-03 ⋅ Bleeping Computer ⋅ Lawrence Abrams
Ransomware attack hits Italy's Lazio region, affects COVID-19 site
LockBit RansomEXX
2021-08-03 ⋅ Twitter (@sysopfb) ⋅ Jason Reaves
Tweet on python script to decode the blob from Blackmatter ransomware
DarkSide
2021-08-03 ⋅ Twitter (@ValthekOn) ⋅ Valthek
Tweet on blacklisted extensions & names of BlackMatter ransomware making the check against custom hashes values
DarkSide
2021-08-03 ⋅ Twitter (@sisoma2) ⋅ sisoma2
Python script for recovering the hashes hardcoded in different samples of the BlackMatter ransomware
DarkSide
2021-08-03 ⋅ Group-IB ⋅ Anastasia Tikhonova, Dmitry Kupin
The Art of Cyberwarfare Chinese APTs attack Russia
Albaniiutas Mail-O SManager TA428
2021-08-02 ⋅ Youtube (Forschungsinstitut Cyber Defense) ⋅ Alexander Rausch, Konstantin Klinger
The CODE 2021: Workshop presentation and demonstration about CobaltStrike
Cobalt Strike
2021-08-02 ⋅ The Record ⋅ Dmitry Smilyanets
An interview with BlackMatter: A new ransomware group that’s learning from the mistakes of DarkSide and REvil
DarkSide LockBit REvil
2021-08-02 ⋅ ⋅ 360 Threat Intelligence Center ⋅ Advanced Threat Institute
Operation Hunting - The latest attack by the CNC (APT-C-48) has been revealed
2021-08-02 ⋅ AT&T ⋅ Javier Ruiz, Ofer Caspi
New sophisticated RAT in town: FatalRat analysis
FatalRat
2021-08-01 ⋅ The Record ⋅ Catalin Cimpanu
Decryptor released for Prometheus ransomware victims
Prometheus
2021-08-01 ⋅ ⋅ ID Ransomware ⋅ Andrew Ivanov
BlackMatter Ransomware
DarkSide
2021-07-31 ⋅ Bleeping Computer ⋅ Lawrence Abrams
DarkSide ransomware gang returns as new BlackMatter operation
DarkSide
2021-07-31 ⋅ Bleeping Computer ⋅ Lawrence Abrams
BlackMatter ransomware gang rises from the ashes of DarkSide, REvil
DarkSide REvil
2021-07-30 ⋅ Threatpost ⋅ Elizabeth Montalbano
Novel Meteor Wiper Used in Attack that Crippled Iranian Train System
Meteor
2021-07-30 ⋅ HP ⋅ Patrick Schläpfer
Detecting TA551 domains
Valak Dridex IcedID ISFB QakBot
2021-07-30 ⋅ Bleeping Computer ⋅ Sergiu Gatlan
DOJ: SolarWinds hackers breached emails from 27 US Attorneys’ offices
2021-07-30 ⋅ RiskIQ ⋅ Team Atlas
Bear Tracks: Infrastructure Patterns Lead to More Than 30 Active APT29 C2 Servers
elf.wellmess WellMess
2021-07-29 ⋅ Microsoft ⋅ Microsoft Defender Threat Intelligence
BazaCall: Phony call centers lead to exfiltration and ransomware
BazarBackdoor BazarCall
2021-07-29 ⋅ Microsoft ⋅ Microsoft 365 Defender Threat Intelligence Team
When coin miners evolve, Part 2: Hunting down LemonDuck and LemonCat attacks
Lemon Duck
2021-07-29 ⋅ 360 Total Security ⋅ kate
“Netfilter Rootkit II ” Continues to Hold WHQL Signatures
NetfilterRootkit