Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-04-23 ⋅ Twitter (@vikas891) ⋅ Vikas Singh
Tweet on DOPPEL SPIDER using Intensive/Multiple Injected Cobalt Strike Beacons with varied polling intervals
Cobalt Strike DoppelPaymer
2021-04-23 ⋅ CSIS ⋅ CSIS
Supply chain attack on the password manager Clickstudios - PASSWORDSTATE
Moserpass
2021-04-23 ⋅ Darktrace ⋅ Max Heinemeyer
APT35 ‘Charming Kitten' discovered in a pre-infected environment
2021-04-23 ⋅ CNBC ⋅ Eamon Javers
Axis of REvil: What we know about the hacker collective taunting Apple
REvil
2021-04-23 ⋅ GuidePoint Security ⋅ Drew Schmitt
Mount Locker Ransomware Steps up Counter-IR Capabilities, Hindering Efforts for Detection, Response and Investigation
Mount Locker
2021-04-22 ⋅ Lacework Labs
Sysrv-Hello Expands Infrastructure
Sysrv-hello
2021-04-22 ⋅ lacework ⋅ Chris Hall, Jared Stroud
Sysrv-Hello Expands Infrastructure
Sysrv-hello
2021-04-22 ⋅ Twitter (@AltShiftPrtScn) ⋅ Peter Mackenzie
Twwet On TTPs seen in IR used by DOPPEL SPIDER
Cobalt Strike DoppelPaymer
2021-04-22 ⋅ Twitter (@ET_Labs) ⋅ ET Labs
Tweet on Lunar Builder exfiltrating data via Discord webhook
2021-04-22 ⋅ The Record ⋅ Catalin Cimpanu
Nightmare week for security vendors: Now a Trend Micro bug is being exploited in the wild
2021-04-22 ⋅ The Record ⋅ Catalin Cimpanu
Ransomware gang wants to short the stock price of their victims
DarkSide
2021-04-22 ⋅ splunk ⋅ Dave Herrald, Drew Church, James Brodsky, John Stoner, Katie Brown, Marcus LaFerrera, Michael Natkin, Mick Baccio, Ryan Kovar
SUPERNOVA Redux, with a Generous Portion of Masquerading
SUPERNOVA
2021-04-22 ⋅ ⋅ BR.DE ⋅ Florian Flade, Hakan Tanriverdi
Der Mann in Merkels Rechner - Jagd auf Putins Hacker
2021-04-22 ⋅ Twitter (@AffableKraut) ⋅ Eric Brandel
A thread on possibly new magecart skimmer
magecart
2021-04-22 ⋅ Check Point ⋅ Omer Hofman
Turning Telegram toxic: ‘ToxicEye’ RAT is the latest to use Telegram for command & control
ToxicEye
2021-04-22 ⋅ Fortinet ⋅ Xiaopeng Zhang
Deep Analysis: FormBook New Variant Delivered in Phishing Campaign – Part II
Formbook
2021-04-22 ⋅ RiskIQ ⋅ RiskIQ
SolarWinds: Advancing the Story
SUNBURST
2021-04-22 ⋅ RiskIQ ⋅ Adam Castleman, Jordan Herman
Stealing All Your Information For Years With Shadow Z118 PayPal Phish Kits
2021-04-22 ⋅ DomainTools ⋅ Joe Slowik
An Undersea Royal Road: Exploring Malicious Documents and Associated Malware
2021-04-21 ⋅ Cybleinc ⋅ cybleinc
Donot Team APT Group Is Back To Using Old Malicious Patterns
KnSpy