Click here to download all references as Bib-File.
| 2019-10-16 ⋅ Proofpoint ⋅ TA505 Distributes New SDBbot Remote Access Trojan with Get2 Downloader Get2 SDBbot TA505 |
| 2019-09-02 ⋅ Volexity ⋅ Digital Crackdown: Large-Scale Surveillance and Exploitation of Uyghurs scanbox POISON CARP |
| 2019-07-02 ⋅ Proofpoint ⋅ TA505 begins summer campaigns with a new pet malware downloader, AndroMut, in the UAE, South Korea, Singapore, and the United States AndroMut FlawedAmmyy |
| 2019-04-17 ⋅ Cisco Talos ⋅ DNS Hijacking Abuses Trust In Core Internet Service Sea Turtle |
| 2019-02-20 ⋅ Cisco Talos ⋅ Combing Through Brushaloader Amid Massive Detection Uptick BrushaLoader |
| 2019-01-17 ⋅ Accenture ⋅ Pond Loach delivers BadCake malware Salgorea APT32 |
| 2018-11-19 ⋅ FireEye ⋅ Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign Cobalt Strike |
| 2018-08-30 ⋅ Twitter (@mesa_matt) ⋅ Tweet on PsiX PsiX |
| 2018-06-07 ⋅ Volexity ⋅ Patchwork APT Group Targets US Think Tanks Quasar RAT Unidentified 047 QUILTED TIGER |
| 2018-04-20 ⋅ Booz Allen Hamilton ⋅ Researchers Discover New variants of APT34 Malware BONDUPDATER POWRUNER |
| 2018-02-12 ⋅ Cisco ⋅ Olympic Destroyer Takes Aim At Winter Olympics Olympic Destroyer |
| 2017-09-20 ⋅ Cisco Talos ⋅ CCleaner Command and Control Causes Concern CCleaner Backdoor |
| 2017-09-18 ⋅ Cisco Talos ⋅ CCleanup: A Vast Number of Machines at Risk CCleaner Backdoor |
| 2017-09-05 ⋅ Cisco Talos ⋅ Graftor - But I Never Asked for This… Graftor |
| 2017-08-25 ⋅ Proofpoint ⋅ Operation RAT Cook: Chinese APT actors use fake Game of Thrones leaks as lures 9002 RAT |
| 2017-08-03 ⋅ Cisco Talos ⋅ Taking the FIRST look at Crypt0l0cker Crypt0l0cker |
| 2017-07-31 ⋅ Proofpoint ⋅ FIN7/Carbanak threat actor unleashes Bateleur JScript backdoor Bateleur FIN7 |
| 2017-06-21 ⋅ Cisco ⋅ Player 1 Limps Back Into the Ring - Hello again, Locky! Locky |
| 2017-06-01 ⋅ Proofpoint ⋅ Microsoft Word Intruder Integrates CVE-2017-0199, Utilized by Cobalt Group to Target Financial Institutions Cobalt |
| 2017-05-03 ⋅ FireEye ⋅ To SDB, Or Not To SDB: FIN7 Leveraging Shim Databases for Persistence FIN7 |