Click here to download all references as Bib-File.
| 2022-07-07 ⋅ Sentinel LABS ⋅ Targets of Interest - Russian Organizations Increasingly Under Attack By Chinese APTs 8.t Dropper Korlia |
| 2022-07-07 ⋅ JPCERT/CC ⋅ YamaBot Malware Used by Lazarus YamaBot |
| 2022-07-05 ⋅ JPCERT/CC ⋅ VSingle malware that obtains C2 server information from GitHub VSingle |
| 2022-07-01 ⋅ SYGNIA ⋅ Luna Moth: The Actors Behind the Recent False Subscription Scams |
| 2022-06-30 ⋅ Microsoft ⋅ Using process creation properties to catch evasion techniques |
| 2022-06-28 ⋅ Accenture ⋅ Steal(Bit) or exfil, what does it (Ex)Matter? Comparative Analysis of Custom Exfiltration Tools ExMatter StealBit |
| 2022-05-30 ⋅ Automatically Unpacking IcedID Stage 1 with Angr IcedID |
| 2022-05-25 ⋅ Trend Micro ⋅ New Linux-Based Ransomware Cheerscrypt Targets ESXi Devices |
| 2022-05-25 ⋅ CrowdStrike ⋅ Hunting a Global Telecommunications Threat: DecisiveArchitect and Its Custom Implant JustForFun BPFDoor |
| 2022-05-16 ⋅ Malwarebytes Labs ⋅ Custom PowerShell RAT targets Germans seeking information about the Ukraine crisis Unidentified PS 003 (RAT) |
| 2022-05-16 ⋅ JPCERT/CC ⋅ Analysis of HUI Loader HUI Loader PlugX Poison Ivy Quasar RAT |
| 2022-05-07 ⋅ YouTube (botconf eu) ⋅ Operation Gamblingpuppet: Analysis Of A Multiplatform Campaign Targeting Online Gambling Customers Earth Berberoka |
| 2022-05-04 ⋅ Cybereason ⋅ Operation CuckooBees: Deep-Dive into Stealthy Winnti Techniques PRIVATELOG Spyder STASHLOG Winnti |
| 2022-05-04 ⋅ HP ⋅ Tips for Automating IOC Extraction from GootLoader, a Changing JavaScript Malware GootLoader |
| 2022-05-04 ⋅ Cybereason ⋅ Operation CuckooBees: A Winnti Malware Arsenal Deep-Dive PRIVATELOG Spyder STASHLOG Winnti |
| 2022-05-03 ⋅ Cluster25 ⋅ The Strange Link Between A Destructive Malware And A Ransomware-Gang Linked Custom Loader: IsaacWiper Vs Vatet Cobalt Strike IsaacWiper PyXie |
| 2022-04-27 ⋅ Zscaler ⋅ Targeted attack on Thailand Pass customers delivers AsyncRAT AsyncRAT |
| 2022-04-21 ⋅ CrowdStrike ⋅ LemonDuck Targets Docker for Cryptomining Operations Lemon Duck |
| 2022-04-14 ⋅ Bleeping Computer ⋅ New ZingoStealer infostealer drops more malware, cryptominers |
| 2022-04-13 ⋅ ESET Research ⋅ ESET takes part in global operation to disrupt Zloader botnets Cobalt Strike Zloader |