Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-07-29 ⋅ Microsoft ⋅ Microsoft 365 Defender Threat Intelligence Team
BazaCall: Phony call centers lead to exfiltration and ransomware
BazarBackdoor Cobalt Strike
2021-07-29 ⋅ ENISA ⋅ Apostolos Malatras, Eleni Tsekmezoglou, Ifigeneia Lella, Konstantinos Moulinos, Marianthi Theocharidou, Sebastian García, Veronica Valeros, Volker Distelrath
ENISA Threat Landscape for Supply Chain Attacks
2021-07-28 ⋅ ThreatFabric ⋅ ThreatFabric
Vultur, with a V for VNC
Vultur
2021-07-28 ⋅ Threatpost ⋅ Lisa Vaas
BlackMatter & Haron: Evil Ransomware Newborns or Rebirths
Haron Ransomware
2021-07-28 ⋅ Malwarebytes ⋅ Hossein Jazi
Crimea “manifesto” deploys VBA Rat using double attack vectors
2021-07-28 ⋅ DomainTools ⋅ Chad Anderson
Finding AnchorDNS C2s With Iris Investigate
AnchorDNS
2021-07-28 ⋅ Prevailion ⋅ Prevailion
Cert Safari: Leveraging TLS Certificates to Hunt Evil
2021-07-27 ⋅ Bitdefender ⋅ Martin Zugec, Victor Vrabie
Deep dive into a FIN8 attack – A forensic investigation
2021-07-27 ⋅ Trend Micro ⋅ Alfredo Oliveira, David Fiser
Threat Actors Exploit Misconfigured Apache Hadoop YARN
Kinsing
2021-07-27 ⋅ Flashpoint ⋅ Flashpoint
Chatter Indicates BlackMatter as REvil Successor
REvil
2021-07-27 ⋅ Youtube (SANS Institute) ⋅ John Hammond, Katie Nickels
SANS Threat Analysis Rundown - Kaseya VSA attack
REvil
2021-07-27 ⋅ Palo Alto Networks Unit 42 ⋅ Alex Hinchliffe, Mike Harbison
THOR: Previously Unseen PlugX Variant Deployed During Microsoft Exchange Server Attacks by PKPLUG Group
PlugX
2021-07-27 ⋅ The Record ⋅ Catalin Cimpanu
BlackMatter ransomware targets companies with revenue of $100 million and more
2021-07-27 ⋅ Recorded Future ⋅ Insikt Group®
BlackMatter Ransomware Emerges As Successor to DarkSide, REvil
DarkSide LockBit REvil
2021-07-27 ⋅ Bleeping Computer ⋅ Sergiu Gatlan
UC San Diego Health discloses data breach after phishing attack
2021-07-27 ⋅ Elastic ⋅ Elastic Security Intelligence & Analytics Team
Collecting and operationalizing threat data from the Mozi botnet
Mozi
2021-07-27 ⋅ ⋅ 360 Threat Intelligence Center ⋅ Advanced Threat Institute
Summary of Kimsuky's secret stealing activities in the first half of 2021
2021-07-27 ⋅ Blackberry ⋅ BlackBerry Research & Intelligence Team
Old Dogs New Tricks: Attackers Adopt Exotic Programming Languages
elf.wellmess ElectroRAT BazarNimrod Buer Cobalt Strike Remcos Snake TeleBot WellMess Zebrocy
2021-07-27 ⋅ SYGNIA ⋅ Amitai Ben Shushan Ehrlich, Amnon Kushnir, Arie Zilberstein, Asaf Eitani, Gil Biton, Itay Shohat, Martin Korman, Noam Lifshitz, Sygnia Incident Response Team
TG1021: "Praying Mantis" Dissecting an Advanced Memory-Resident Attack
2021-07-26 ⋅ Malwarebytes ⋅ Thomas Reed
OSX.XLoader hides little except its main purpose: What we learned in the installation process
Xloader