Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-10-18 ⋅ Flashpoint ⋅ Flashpoint
REvil Disappears Again: ‘Something Is Rotten in the State of Ransomware’
REvil REvil
2021-10-01 ⋅ HP ⋅ HP Wolf Security
Threat Insights Report Q3 - 2021
STRRAT CloudEyE NetWire RC Remcos TrickBot Vjw0rm
2021-09-29 ⋅ Flashpoint ⋅ Flashpoint
Russian hacker Q&A: An Interview With REvil-Affiliated Ransomware Contractor
REvil REvil
2021-09-28 ⋅ Flashpoint ⋅ Flashpoint
REvil’s “Cryptobackdoor” Con: Ransomware Group’s Tactics Roil Affiliates, Sparking a Fallout
REvil
2021-09-19 ⋅ HP ⋅ Patrick Schläpfer
MirrorBlast and TA505: Examining Similarities in Tactics, Techniques and Procedures
MirrorBlast
2021-08-10 ⋅ Flashpoint ⋅ Flashpoint
REvil Master Key for Kaseya Attack Posted to XSS
REvil
2021-07-30 ⋅ HP ⋅ Patrick Schläpfer
Detecting TA551 domains
Valak Dridex IcedID ISFB QakBot
2021-07-27 ⋅ Flashpoint ⋅ Flashpoint
Chatter Indicates BlackMatter as REvil Successor
REvil
2021-07-09 ⋅ Seqrite ⋅ Chaitanya Haritash, Nihar Deshpande, Shayak Tarafdar
Seqrite uncovers second wave of Operation SideCopy targeting Indian critical infrastructure PSUs
NjRAT ReverseRAT
2021-06-28 ⋅ HP ⋅ Patrick Schläpfer
Snake Keylogger’s Many Skins: Analysing Code Reuse Among Infostealers
404 Keylogger Phoenix Keylogger
2021-06-15 ⋅ Nextron Systems ⋅ Nextron Systems
Use YARA math Module Extension in THOR TechPreview and THOR Lite
2021-06-04 ⋅ JPCERT/CC ⋅ Kota Kino
PHP Malware Used in Lucky Visitor Scam
2021-05-25 ⋅ Chainalysis, Flashpoint
Hydra: Where The Crypto Money Laundering Trail Goes Dark
2021-05-21 ⋅ Twitter (@alberto__segura) ⋅ Alberto Segura
Tweet on Flubot version 4.2 (p.php variant) with new AES strings encryption
FluBot
2021-05-13 ⋅ Malwarebytes ⋅ Jérôme Segura
Newly observed PHP-based skimmer shows ongoing Magecart Group 12 activity
magecart
2021-05-11 ⋅ Flashpoint ⋅ Flashpoint
DarkSide Ransomware Links to REvil Group Difficult to Dismiss
DarkSide REvil
2021-04-30 ⋅ MADRID Labs ⋅ Odin Bernstein
Qbot: Analyzing PHP Proxy Scripts from Compromised Web Server
QakBot
2021-04-30 ⋅ Flashpoint ⋅ Flashpoint
A Second Iranian State-Sponsored Ransomware Operation “Project Signal” Emerges
2021-04-14 ⋅ HP ⋅ Patrick Schläpfer
From PoC to Exploit Kit: Purple Fox now exploits CVE-2021-26411
PurpleFox
2021-04-08 ⋅ HP ⋅ Michael McGuire
Nation States, Cyberconflict and the Web of Profit