Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-07-07 ⋅ Proofpoint ⋅ Greg Lesnewich, Mark Kelly, Proofpoint Threat Research Team
One Email Closer to the Edge: UNK_MassTraction & the Physics of Exploitation
IceCube
2026-07-07 ⋅ Cisco Talos ⋅ Asheer Malhotra, Brandon White, Jungsoo An, Vanja Svajcer
UAT-7810 continues building ORB networks using new malware
DOGLEASH LONGLEASH JARLEASH UAT-7810
2026-07-02 ⋅ Mrtiepolo ⋅ Gianluca Tiepolo
Operation Turb00 — Part 3: Unmasking the SnappyClient RAT
HijackLoader SnappyClient
2026-07-02 ⋅ FBI ⋅ FBI
Cyber Criminal Group TeamPCP
Shai-Hulud TeamPCP
2026-07-01 ⋅ Fortinet ⋅ Rachael Liao
Analysis of Ongoing Ousaban Attacks Targeting the Iberian Peninsula
Ousaban
2026-07-01 ⋅ Socket ⋅ Karlo Zanki
PolinRider: North Korea-Linked Supply Chain Campaign Expands Across Open Source Ecosystems
JADESNOW
2026-06-30 ⋅ JFrog Security ⋅ Yair Benamou
Lazarus-Linked npm Malware Masquerades as Rollup Polyfills
OtterCookie
2026-06-29 ⋅ Trend Micro ⋅ Yuya Sato
TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry
TonRAT
2026-06-29 ⋅ The DFIR Report ⋅ Ahmed Farouk, Angelo Violetti, Dino, Jake, Mattison Schuch, Renzon Cruz
From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira
Akira AdaptixC2 Akira BumbleBee
2026-06-29 ⋅ BlackPoint ⋅ Nevan Beal, Sam Decker
A Djinn in the Machine: TaskWeaver’s Node.js Intrusion Chain
2026-06-28 ⋅ Acronis ⋅ Santiago Pontiroli, Subhajeet Singha
Mustang Panda targets India's government and energy sectors with ZOHOMURK and MINIRECON
MINIRECON ZOHOMURK
2026-06-26 ⋅ Censys ⋅ Martijn Grooten
UNC1151 Phishing Email Targeting Belarusian Politician Points to Multi-National Campaign
2026-06-26 ⋅ Censys ⋅ Aidan Holland
AsyncRAT Family Threat Overview
AsyncRAT BitRAT DCRat Quasar RAT Venom RAT
2026-06-25 ⋅ Microsoft Security ⋅ Microsoft Defender Experts, Microsoft Defender Security Research Team, Parth Jomadkar
Photo ZIP campaign targeting hospitality industry delivers Node.js implant for persistent access
TonRAT
2026-06-24 ⋅ BitSight ⋅ Bitsight TRACE
Amadey and StealC: Malware-as-a-Service Unavailable
Amadey Stealc
2026-06-24 ⋅ JFrog Security ⋅ Guy Korolevski, Yair Benamou
Hijacked npm Packages Use Novel VSCode Autorun and Blockchain Dead Drops to Deploy a Credential/Crypto Stealer
JADESNOW
2026-06-24 ⋅ Europol ⋅ Europol
Global cyber strike disrupts SocGholish, Amadey, and StealC malware networks
FAKEUPDATES Amadey Stealc
2026-06-23 ⋅ Sentinel LABS ⋅ Phil Stokes
macOS.Gaslight | Rust Backdoor Turns Prompt Injection on the Analyst, Not the Sandbox
Gaslight
2026-06-23 ⋅ abuse.ch ⋅ abuse.ch
MalwareBazaar | SolarisLoader
SolarisLoader
2026-06-22 ⋅ Melted in Hex ⋅ Melted in Hex
Dead Drops on the Blockchain: Reversing a DPRK npm Loader (PolinRider / A6-Shadow-15)
JADESNOW