Click here to download all references as Bib-File.•
| 2024-08-08
⋅
Twitter (@MonThreat)
⋅
Tweet about EvilByte claiming to have hacked Argentine Radio Evilbyte |
| 2024-08-04
⋅
Twitter (@embee_research)
⋅
Decoding a Cobalt Strike Downloader Script With CyberChef Cobalt Strike |
| 2024-07-10
⋅
Risky.biz
⋅
Risky Biz News: US takes down RT's Twitter bot farm Lifting Zmiy |
| 2024-07-09
⋅
Twitter (@H4ckManac)
⋅
Tweet on data breaches caused by 888 group Threat Actor 888 |
| 2024-07-01
⋅
Twitter (@DailyDarkWeb)
⋅
Tweet on Anonymous KSA Anonymous KSA |
| 2024-05-23
⋅
Twitter (@embee_research)
⋅
Tracking APT SideWinder With DNS Records SideWinder |
| 2024-05-21
⋅
Twitter (@embee_research)
⋅
Tweets on decoding a Latrodectus loader Latrodectus |
| 2024-05-15
⋅
Twitter (@embee_research)
⋅
Revealing Spammer Infrastructure With Passive DNS - 226 Toll-Themed Domains Targeting Australia |
| 2024-05-07
⋅
Twitter (@fs0c131y)
⋅
Tweets on LockBitSupp LockBit |
| 2024-04-29
⋅
Twitter (@sekoia_io)
⋅
@sekoia_io's tweet about the (not so) new infostealer, named ACR Stealer ACR Stealer |
| 2024-04-11
⋅
Twitter (@embee_research)
⋅
Tracking Malicious Infrastructure With DNS Records - Vultur Banking Trojan Vultur |
| 2024-04-04
⋅
Twitter (@BushidoToken)
⋅
Tweet about the SEXi Ransomware attack on IXMETRO POWERHOST SEXi |
| 2024-04-04
⋅
Twitter (@embee_research)
⋅
TLS Certificate For Threat Intelligence - Identifying MatanBuchus Domains Through Hardcoded Certificate Values Matanbuchus |
| 2024-04-01
⋅
Twitter (@embee_research)
⋅
Passive DNS For Phishing Link Analysis - Identifying 36 Latrodectus Domains With Historical Records and 302 Redirects Latrodectus |
| 2024-03-31
⋅
Twitter (@fr0gger)
⋅
Tweet with visual summary of the execution flow xzbot |
| 2024-03-30
⋅
Twitter (@embee_research)
⋅
Uncovering APT Infrastructure with Passive DNS Pivoting |
| 2024-03-27
⋅
Twitter (@embee_research)
⋅
Uncovering Malicious Infrastructure with DNS Pivoting LokiBot XWorm |
| 2024-03-18
⋅
Twitter (@juanandres_gs)
⋅
Twitter thread on the sample identified AcidPour |
| 2024-03-07
⋅
Twitter (@H4ckManac)
⋅
Duvel reportedly compromised by Stormous ransomware group Stormous |
| 2024-03-02
⋅
Twitter (@SinghSoodeep)
⋅
Tweet on WINELOADER targeting with German embassy themed lure WINELOADER |