Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-08-25 ⋅ splunk ⋅ Splunk Threat Research Team
AppLocker Rules as Defense Evasion: Complete Analysis
Azorult
2022-08-25 ⋅ Palo Alto Networks Unit 42 ⋅ Amer Elsad
Threat Assessment: Black Basta Ransomware
Black Basta
2022-08-25 ⋅ Microsoft ⋅ Microsoft 365 Defender Research Team, Microsoft 365 Defender Threat Intelligence Team, Microsoft Threat Intelligence Center (MSTIC)
MERCURY leveraging Log4j 2 vulnerabilities in unpatched systems to target Israeli organizations
MimiKatz
2022-08-25 ⋅ muha2xmad ⋅ Muhammad Hasan Ali
Technical analysis of IRATA android malware
IRATA
2022-08-25 ⋅ K7 Security ⋅ Gaurav Yaday
BleachGap Revamped
BleachGap
2022-08-25 ⋅ Kaspersky ⋅ Seongsu Park
Kimsuky’s GoldDragon cluster and its C2 operations
2022-08-25 ⋅ Github (muha2xmad) ⋅ Muhammad Hasan Ali
Thread about the content of IRATA malicious APK
IRATA
2022-08-24 ⋅ VirusTotal
Virustotal Page for the sample
Unidentified 108
2022-08-24 ⋅ Trend Micro ⋅ Hitomi Kimura, Ryan Soliven
Ransomware Actor Abuses Genshin Impact Anti-Cheat Driver to Kill Antivirus
Babuk
2022-08-24 ⋅ Deep instinct ⋅ Deep Instinct Threat Lab
The Dark Side of Bumblebee Malware Loader
BumbleBee
2022-08-24 ⋅ CrowdStrike ⋅ Ioan Iacob, Iulian Madalin Ionita
The Anatomy of Wiper Malware, Part 2: Third-Party Drivers
2022-08-24 ⋅ Trend Micro ⋅ Hitomi Kimura, Ryan Soliven
Ransomware Actor Abuses Genshin Impact Anti-Cheat Driver to Kill Antivirus (IoCs)
Babuk
2022-08-24 ⋅ Trend Micro ⋅ Trend Micro
Looking into the Void - Targeting Bulletproof Hosts to Block Attacks Early in the Kill Chain
2022-08-24 ⋅ Elastic ⋅ Cyril François
QBOT Malware Analysis
QakBot
2022-08-24 ⋅ Microsoft ⋅ Microsoft Security Experts
Looking for the ‘Sliver’ lining: Hunting for emerging command-and-control frameworks
BumbleBee Sliver
2022-08-24 ⋅ Github (rad9800) ⋅ Rad Kawar
Malware Madness: EXCEPTION edition
Dridex
2022-08-24 ⋅ Microsoft ⋅ Detection and Response Team (DART), Microsoft 365 Defender Team, Microsoft Threat Intelligence Center (MSTIC)
MagicWeb: NOBELIUM’s post-compromise trick to authenticate as anyone
2022-08-24 ⋅ Trellix ⋅ Adithya Chandra, Sushant Kumar Arya
Demystifying Qbot Malware
QakBot
2022-08-23 ⋅ Palo Alto Networks Unit 42 ⋅ Lucas Hu
Legitimate SaaS Platforms Being Used to Host Phishing Attacks
2022-08-23 ⋅ Zscaler ⋅ Kaivalya Khursale, Mitesh Wani
Making victims pay, infostealer malwares mimick pirated-software download sites
RedLine Stealer