Click here to download all references as Bib-File.
| 2022-01-12 ⋅ Netskope ⋅ Abusing Microsoft Office Using Malicious Web Archive Files |
| 2022-01-05 ⋅ Check Point ⋅ Can You Trust a File’s Digital Signature? New Zloader Campaign exploits Microsoft’s Signature Verification putting users at risk Zloader |
| 2022-01-04 ⋅ Microsoft ⋅ Leveraging the Power of KQL in Incident Response |
| 2021-12-09 ⋅ Microsoft ⋅ A closer look at Qakbot’s latest building blocks (and how to knock them down) QakBot |
| 2021-12-06 ⋅ Microsoft ⋅ NICKEL targeting government organizations across Latin America and Europe MimiKatz |
| 2021-12-06 ⋅ Notice of Pleadings ⋅ Complaint filed by Microsoft against NICKEL/APT15 MimiKatz |
| 2021-12-06 ⋅ Microsoft ⋅ Protecting people from recent cyberattacks |
| 2021-12-06 ⋅ Mandiant ⋅ Suspected Russian Activity Targeting Government and Business Entities Around the Globe (UNC2452) Cobalt Strike CryptBot |
| 2021-12-02 ⋅ Microsoft ⋅ Structured threat hunting: One way Microsoft Threat Experts prioritizes customer defense |
| 2021-11-24 ⋅ safebreach ⋅ New PowerShortShell Stealer Exploits Recent Microsoft MSHTML Vulnerability to Spy on Farsi Speakers PowerShortShell |
| 2021-11-18 ⋅ Microsoft ⋅ Iranian targeting of IT sector on the rise MimiKatz ShellClient RAT |
| 2021-11-17 ⋅ Microsoft ⋅ Creating your first Microsoft Sentinel Notebook |
| 2021-11-17 ⋅ CISA ⋅ Alert (AA21-321A): Iranian Government-Sponsored APT Cyber Actors Exploiting Microsoft Exchange and Fortinet Vulnerabilities in Furtherance of Malicious Activities |
| 2021-11-16 ⋅ Microsoft ⋅ Evolving trends in Iranian threat actor activity – MSTIC presentation at CyberWarCon 2021 |
| 2021-11-11 ⋅ Microsoft ⋅ HTML smuggling surges: Highly evasive loader technique increasingly used in banking malware, targeted attacks AsyncRAT Mekotio NjRAT |
| 2021-11-10 ⋅ Microsoft ⋅ The hunt for NOBELIUM, the most sophisticated nation-state attack in history |
| 2021-11-08 ⋅ Microsoft ⋅ Threat actor DEV-0322 exploiting ZOHO ManageEngine ADSelfService Plus |
| 2021-11-03 ⋅ Microsoft ⋅ Understanding Nation State Threats |
| 2021-11-03 ⋅ Cisco Talos ⋅ Microsoft Exchange vulnerabilities exploited once again for ransomware, this time with Babuk Babuk CHINACHOPPER |
| 2021-11-02 ⋅ Microsoft ⋅ Hunting for potential network beaconing patterns using Apache Spark via Azure Synapse – Part 1 |