Click here to download all references as Bib-File.
| 2021-05-20 ⋅ Microsoft ⋅ Phorpiex morphs: How a longstanding botnet persists and thrives in the current threat environment Phorpiex |
| 2021-05-18 ⋅ Blackberry ⋅ Strong ARMing with MacOS: Adventures in Cross-Platform Emulation |
| 2021-05-13 ⋅ Blackberry ⋅ Threat Thursday: SombRAT — Always Leave Yourself a Backdoor SombRAT |
| 2021-05-06 ⋅ Blackberry ⋅ Threat Thursday: Dr. REvil Ransomware Strikes Again, Employs Double Extortion Tactics REvil |
| 2021-04-22 ⋅ xorl %eax, %eax ⋅ A gentle introduction to building a threat intelligence team |
| 2021-04-09 ⋅ Microsoft ⋅ Investigating a unique “form” of email delivery for IcedID malware IcedID |
| 2021-04-06 ⋅ Malwarebytes ⋅ A deep dive into Saint Bot, a new downloader Saint Bot |
| 2021-03-25 ⋅ Microsoft ⋅ Analyzing attacks taking advantage of the Exchange Server vulnerabilities CHINACHOPPER |
| 2021-03-24 ⋅ Malwarebytes ⋅ Software renewal scammers unmasked |
| 2021-03-04 ⋅ WMC Global ⋅ The Compact Campaign |
| 2021-03-04 ⋅ Microsoft ⋅ GoldMax, GoldFinder, and Sibot: Analyzing NOBELIUM’s layered persistence SUNBURST TEARDROP UNC2452 |
| 2021-03-02 ⋅ Microsoft ⋅ HAFNIUM targeting Exchange Servers with 0-day exploits CHINACHOPPER HAFNIUM |
| 2021-02-12 ⋅ Malwarebytes ⋅ Malvertising campaign on PornHub and other top adult brands exposes users to tech support scams |
| 2021-02-01 ⋅ Microsoft ⋅ What tracking an attacker email infrastructure tells us about persistent cybercriminal operations Dridex Emotet Makop Ransomware SmokeLoader TrickBot |
| 2021-01-29 ⋅ Malwarebytes ⋅ Cleaning up after Emotet: the law enforcement file Emotet |
| 2021-01-28 ⋅ Microsoft ⋅ ZINC attacks against security researchers ComeBacker Klackring |
| 2021-01-11 ⋅ CrowdStrike ⋅ SUNSPOT: An Implant in the Build Process SUNBURST |
| 2021-01-08 ⋅ Reaqta ⋅ Leonardo S.p.A. Data Breach Analysis |
| 2020-12-11 ⋅ Blackberry ⋅ MountLocker Ransomware-as-a-Service Offers Double Extortion Capabilities to Affiliates Cobalt Strike Mount Locker |
| 2020-11-30 ⋅ Microsoft ⋅ Threat actor leverages coin miner techniques to stay under the radar – here’s how to spot them APT32 |