Click here to download all references as Bib-File.
| 2020-10-26 ⋅ SANS ISC InfoSec Forums ⋅ Excel 4 Macros: "Abnormal Sheet Visibility" |
| 2020-09-10 ⋅ SANS ISC InfoSec Forums ⋅ Recent Dridex activity Dridex |
| 2020-07-06 ⋅ Sansec ⋅ North Korean hackers implicated in stealing from US and European shoppers magecart |
| 2020-06-15 ⋅ Sansec ⋅ Magecart strikes amid Corona lockdown magecart |
| 2020-03-23 ⋅ SANS ISC ⋅ KPOT Deployed via AutoIt Script KPOT Stealer |
| 2020-02-03 ⋅ SANS ISC ⋅ Analysis of a triple-encrypted AZORult downloader Azorult |
| 2020-01-23 ⋅ SANS ISC InfoSec Forums ⋅ German language malspam pushes Ursnif ISFB |
| 2019-11-22 ⋅ SANS Cyber Security Summit ⋅ Need for PLEAD: BlackTech Pursuit BLUETHER PLEAD |
| 2019-07-08 ⋅ SANS ⋅ Hunting Webshells: Tracking TwoFace TwoFace |
| 2019-06-25 ⋅ SANS ⋅ Rig Exploit Kit sends Pitou.B Trojan Pitou |
| 2019-05-07 ⋅ SANS ISC InfoSec Forums ⋅ Vulnerable Apache Jenkins exploited in the wild kerberods |
| 2019-04-22 ⋅ SANS ⋅ Unpacking & Decrypting FlawedAmmyy FlawedAmmyy |
| 2019-04-08 ⋅ SANS Cyber Security Summit ⋅ Trails of WindShift WindTail ZhMimikatz |
| 2019-02-20 ⋅ SANS ISC InfoSec Forums ⋅ More Russian language malspam pushing Shade (Troldesh) ransomware Troldesh |
| 2019-02-13 ⋅ Youtube (SANS Digital Forensics & Incident Response) ⋅ Hunting Webshells: Tracking TwoFace - SANS Threat Hunting Summit 2018 TwoFace |
| 2019-01-17 ⋅ SANS ISC InfoSec Forums ⋅ Emotet infections and follow-up malware Emotet |
| 2018-10-01 ⋅ SANS Cyber Summit ⋅ TRITON: How it Disrupted Safety Systems and Changed the Threat Landscape of Industrial Control Systems, Forever Triton |
| 2018-01-17 ⋅ SANS ISC ⋅ Reviewing the spam filters: Malspam pushing Gozi-ISFB ISFB |
| 2017-06-27 ⋅ SANS ⋅ Checking out the new Petya variant EternalPetya |
| 2017-06-22 ⋅ SANS Institute Information Security Reading Room ⋅ Loki-Bot: InformationStealer, Keylogger, &More! Loki Password Stealer (PWS) |