Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-01-12 ⋅ BleepingComputer ⋅ Ionut Ilascu
Hackers take over diplomat's email, target Russian deputy minister
Konni
2022-01-12 ⋅ Avast ⋅ Jan Vojtěšek
Exploit Kits vs. Google Chrome
Magniber UnderminerEK
2022-01-12 ⋅ Cyber And Ramen blog ⋅ Mike R
Analysis of njRAT PowerPoint Macros
NjRAT
2022-01-12 ⋅ muha2xmad ⋅ Muhammad Hasan Ali
Unpacking Ramnit malware
Ramnit
2022-01-12 ⋅ Lab52 ⋅ Jagaimo Kawaii
TokyoX: DLL side-loading an unknown artifact (Part 2)
TokyoX
2022-01-12 ⋅ Netskope ⋅ Gustavo Palazolo
Abusing Microsoft Office Using Malicious Web Archive Files
2022-01-12 ⋅ Github (Dump-GUY) ⋅ Jiří Vinopal
NightSky Ransomware – just a Rook RW fork in VMProtect suit
Rook
2022-01-11 ⋅ Twitter (@cglyer) ⋅ Christopher Glyer
Tweet on CN based ransomware operator using log4shell to deploy NightSky
NightSky BRONZE STARLIGHT
2022-01-11 ⋅ BleepingComputer ⋅ Bill Toulas
New SysJoker backdoor targets Windows, macOS, and Linux
SysJoker SysJoker SysJoker
2022-01-11 ⋅ muha2xmad ⋅ Muhammad Hasan Ali
Unpacking Dridex malware
Dridex
2022-01-11 ⋅ Twitter (@cglyer) ⋅ Christopher Glyer
Thread on DEV-0401, a china based ransomware operator exploiting VMware Horizon with log4shell and deploying NightSky ransomware
Cobalt Strike NightSky
2022-01-11 ⋅ Recorded Future ⋅ Insikt Group®
Combating Human Trafficking With Threat Intelligence
2022-01-11 ⋅ ESET Research ⋅ Michal Poslušný
Signed kernel drivers – Unguarded gateway to Windows’ core
InvisiMole LoJax RobinHood Slingshot
2022-01-11 ⋅ CrowdStrike ⋅ Anmol Maurya
TellYouThePass Ransomware Analysis Reveals a Modern Reinterpretation Using Golang
TellYouThePass
2022-01-11 ⋅ Check Point ⋅ Check Point Research
APT35 exploits Log4j vulnerability to distribute new modular PowerShell toolkit
APT35
2022-01-11 ⋅ Cybereason ⋅ Chen Erlich, Daichi Shimabukuro, Niv Yona, Ofir Ozer, Omri Refaeli
Threat Analysis Report: DatopLoader Exploits ProxyShell to Deliver QBOT and Cobalt Strike
Cobalt Strike QakBot Squirrelwaffle
2022-01-11 ⋅ Intezer ⋅ Avigayil Mechtinger, Nicole Fishbein, Ryan Robinson
New SysJoker Backdoor Targets Windows, Linux, and macOS
SysJoker SysJoker SysJoker
2022-01-10 ⋅ splunk ⋅ Splunk Threat Research Team
Detecting Malware Script Loaders using Remcos: Threat Research Release December 2021
Remcos
2022-01-10 ⋅ Lab52 ⋅ ml10
TokyoX: DLL side-loading an unknown artifact
TokyoX
2022-01-09 ⋅ Github (xephora) ⋅ @x3ph1
Observed malicious IOCs for the ChromeLoader/CS_installer aka Choziosi Loader Malware
Choziosi Choziosi