Click here to download all references as Bib-File.•
| 2024-12-11
⋅
JPCERT/CC
⋅
Attack Exploiting Legitimate Service by APT-C-60 SpyGrace |
| 2024-12-10
⋅
cyble
⋅
Head Mare Group Intensifies Attacks on Russia with PhantomCore Backdoor PhantomCore Head Mare |
| 2024-12-04
⋅
Rapid7
⋅
Black Basta Ransomware Campaign Drops Zbot, DarkGate, and Custom Malware Black Basta Cobalt Strike DarkGate SystemBC Zloader |
| 2024-11-22
⋅
Volexity
⋅
The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access APT28 |
| 2024-11-20
⋅
Cofense
⋅
Custom I2P RAT “I2Parcae” Delivered via Pornographic Customer Support Form Spam I2PRAT Unidentified 118 |
| 2024-11-18
⋅
Proofpoint
⋅
Security Brief: ClickFix Social Engineering Technique Floods Threat Landscape AsyncRAT Brute Ratel C4 DanaBot DarkGate Latrodectus Lumma Stealer NetSupportManager RAT XWorm |
| 2024-11-10
⋅
DFIR.ch
⋅
Reptile's Custom Kernel-Module Launcher reptile |
| 2024-10-19
⋅
Emanuele De Lucia on Security
⋅
“Hey ESET, Wait for the Leak”: Dissecting the “OctoberSeventh” Wiper targeting ESET customers in Israel OctoberSeventh |
| 2024-10-17
⋅
Sekoia
⋅
ClickFix tactic: The Phantom Meet Rhadamanthys Stealc |
| 2024-10-08
⋅
Trustwave
⋅
Pronsis Loader: A JPHP-Driven Malware Diverging from D3F@ck Loader Pronsis Loader Latrodectus Lumma Stealer |
| 2024-09-12
⋅
Cado Security
⋅
From Automation to Exploitation: The Growing Misuse of Selenium Grid for Cryptomining and Proxyjacking perfctl |
| 2024-08-30
⋅
Denwp Research
⋅
Anatomy of a Lumma Stealer Attack via Fake CAPTCHA Pages - Part 1 Lumma Stealer |
| 2024-08-29
⋅
Proofpoint
⋅
The Malware That Must Not Be Named: Suspected Espionage Campaign Delivers “Voldemort” Voldemort |
| 2024-08-21
⋅
OODA Loop
⋅
Toyota Customer, Employee Data Leaked in Confirmed Data Breach ZeroSevenGroup |
| 2024-08-20
⋅
SiliconAngle
⋅
Toyota alleges stolen customer data published on hacking site came from outside supplier ZeroSevenGroup |
| 2024-07-26
⋅
Trellix
⋅
Handala’s Wiper Targets Israel Handala Hatef Handala |
| 2024-07-16
⋅
JPCERT/CC
⋅
MirrorFace Attack against Japanese Organisations LODEINFO NOOPDOOR |
| 2024-07-15
⋅
Sekoia
⋅
MuddyWater replaces Atera by custom MuddyRot implant in a recent campaign bugsleep |
| 2024-06-28
⋅
Trend Micro
⋅
Examining Water Sigbin's Infection Routine Leading to an XMRig Cryptominer Water Sigbin |
| 2024-06-25
⋅
Cado Security
⋅
From Dormant to Dangerous: P2Pinfect Evolves to Deploy New Ransomware and Cryptominer P2Pinfect |