Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-12-20 ⋅ ⋅ Qianxin ⋅ Red Raindrop Team
First time using a dual platform attack weapon? Analysis of the suspected SideCopy organization's attack activities against India
2021-12-20 ⋅ Qianxin ⋅ Red Raindrop Team
India's Chief of Defence Staff Crashes: SideCopy APT takes advantage of the fire
2021-12-20 ⋅ Sophos ⋅ Sean Gallagher
Logjam: Log4j exploit attempts continue in globally distributed scans, attacks
2021-12-20 ⋅ Vishal Thakur
DefendAgainst: Ransomware ‘STOP’/DJVU
STOP
2021-12-20 ⋅ Github (vithakur) ⋅ Vishal Thakur
STOP/DJVU Ransomware IOC List
STOP
2021-12-20 ⋅ InfoSec Handlers Diary Blog ⋅ Alef Nula, Jan Kopriva
PowerPoint attachments, Agent Tesla and code reuse in malware
Agent Tesla
2021-12-20 ⋅ InQuest ⋅ Nick Chalard
(Don't) Bring Dridex Home for the Holidays
DoppelDridex Dridex
2021-12-20 ⋅ Bleeping Computer ⋅ Lawrence Abrams
Log4j vulnerability now used to install Dridex banking malware
DoppelDridex Meterpreter
2021-12-20 ⋅ YouTube (Malienist) ⋅ Vishal Thakur
Revil Linux Ransomware: Revix
REvil
2021-12-19 ⋅ BleepingComputer ⋅ BleepingComputer
Exposed Docker APIs Abused by DDoS, Cryptojacking Botnet Malware
MrBlack
2021-12-17 ⋅ ⋅ Netzpolitik.org ⋅ Andre Meister
Wir enthüllen den Staatstrojaner „Subzero“ aus Österreich
Subzero
2021-12-17 ⋅ Secureworks ⋅ Counter Threat Unit ResearchTeam, Secureworks Incident Response Team
noPac: A Tale of Two Vulnerabilities That Could End in Ransomware
2021-12-17 ⋅ Sophos ⋅ Hardik Shah, Sean Gallagher
Inside the code: How the Log4Shell exploit works
2021-12-17 ⋅ Trend Micro ⋅ Abraham Camba, Gilbert Sison, Jay Yaneza, Jonna Santos
Staging a Quack: Reverse Analyzing a Fileless QAKBOT Stager
QakBot
2021-12-17 ⋅ FBI ⋅ FBI
AC-000159-MW: APT Actors Exploiting Newly-Identified Zero Day in ManageEngine Desktop Central (CVE-2021-44515)
ShadowPad
2021-12-17 ⋅ Advanced Intelligence ⋅ Vitali Kremez, Yelisey Boguslavskiy
Ransomware Advisory: Log4Shell Exploitation for Initial Access & Lateral Movement
Conti
2021-12-16 ⋅ Avast Decoded ⋅ Threat Intelligence Team
Avast Finds Backdoor on US Government Commission Network
Operation Red Signature
2021-12-16 ⋅ Kaspersky ICS CERT ⋅ Kaspersky
PseudoManuscrypt: a mass-scale spyware attack campaign
Fabookie
2021-12-16 ⋅ Cybereason ⋅ Aleksandar Milenkoski, Kotaro Ogino
Inside the LockBit Arsenal - The StealBit Exfiltration Tool
LockBit StealBit
2021-12-16 ⋅ CitizenLab ⋅ Bahr Abdul Razzak, Bill Marczak, John Scott-Railton, Kristin Berdan, Noura Al-Jizawi, Ron Deibert, Siena Anstis
Pegasus vs. Predator: Dissident's Doubly-Infected iPhone Reveals Cytrox Mercenary Spyware
Chrysaor Caramel Tsunami