Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-05-28 ⋅ Microsoft ⋅ Microsoft Threat Intelligence Center (MSTIC)
Breaking down NOBELIUM’s latest early-stage toolset
BOOMBOX Cobalt Strike
2021-05-28 ⋅ CISA ⋅ US-CERT
Malware Analysis Report (AR21-148A): Cobalt Strike Beacon
Cobalt Strike
2021-05-28 ⋅ SUCURI ⋅ Ben Martin
WooCommerce Credit Card Skimmer Hides in Plain Sight
2021-05-28 ⋅ Twitter (@MBThreatIntel) ⋅ Malwarebytes Threat Intelligence
Tweet on web skimmer hiding JavaScript inside images for exfiltration
2021-05-28 ⋅ Trend Micro ⋅ Mina Nalim
DarkSide on Linux: Virtual Machines Targeted
DarkSide
2021-05-27 ⋅ cyberpunkleigh ⋅ cyberpunkleigh
Apostle Ransomware Analysis
Apostle
2021-05-27 ⋅ JPCERT/CC ⋅ Yuma Masubuchi
Attacks Embedding XMRig on Compromised Servers
2021-05-27 ⋅ Check Point ⋅ Check Point Research
Uyghurs, a Turkic ethnic minority in China, targeted via fake foundations - Check Point Research
2021-05-27 ⋅ Volexity ⋅ Damien Cash, Josh Grunzweig, Matthew Meltzer, Sean Koessel, Steven Adair, Thomas Lancaster
Suspected APT29 Operation Launches Election Fraud Themed Phishing Campaigns
Cobalt Strike
2021-05-27 ⋅ FireEye ⋅ Dan Perez, Emiel Haeghebaert, Greg Wood, Sarah Jones, Stephen Eckels
Re-Checking Your Pulse: Updates on Chinese APT Actors Compromising Pulse Secure VPN Devices
UNC2630 UNC2717
2021-05-27 ⋅ Microsoft ⋅ Tom Burt
Another Nobelium Cyberattack
2021-05-27 ⋅ 360 netlab ⋅ Alex.Turing, Chai Linyuan, Jinye
Analysis report of the Facefish rootkit
Facefish
2021-05-26 ⋅ DeepInstinct ⋅ Ron Ben Yizhak
A Deep Dive into Packing Software CryptOne
Cobalt Strike Dridex Emotet Gozi ISFB Mailto QakBot SmokeLoader WastedLocker Zloader
2021-05-26 ⋅ Facebook ⋅ Facebook
Threat Report: The State of Influence Operations 2017-2020
2021-05-26 ⋅ CyberScoop ⋅ Tim Starks
Belgium uproots cyber-espionage campaign with suspected ties to China
2021-05-26 ⋅ Check Point ⋅ Alex Ilgayev
Melting Ice – Tracking IcedID Servers with a few simple steps
IcedID
2021-05-26 ⋅ InQuest ⋅ Dmitry Melikov
PSChain
2021-05-26 ⋅ RiskIQ ⋅ Jordan Herman
The MobileInter Skimmer: Hosted by Google, Hiding in Images
2021-05-25 ⋅ Trend Micro ⋅ David Fiser, Magno Logan
TeamTNT Targets Kubernetes, Nearly 50,000 IPs Compromised in Worm-like Attack
2021-05-25 ⋅ Kaspersky ⋅ Fedor Sinitsyn, Yanis Zinchenko
Evolution of JSWorm ransomware
Nefilim Nemty