Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-10-12 ⋅ SOCRadar ⋅ SOCRadar
Inside ICMacOS: From an Infostealer to a Persistent RAT
ICMacOS
2026-10-12 ⋅ Netresec ⋅ Erik Hjelmvik
Detecting AtlasRAT C2
Atlas RAT
2026-10-10 ⋅ GBHackers on Security ⋅ Eswar
DarkBlinders Hackers Use Fake Meeting App to Deploy Backdoor and Steal Government Data
2026-10-09 ⋅ Rogue Authority ⋅ Squiblydoo
A signed PDF viewer that quietly takes orders: the QuartzLine “zenith” backdoor
CLOUDHAZE
2026-10-09 ⋅ abuse.ch ⋅ abuse.ch
MalwareBazaar | SHA256 2dda0c1d9f63287c19663780ba88e731b4530568a65d5886cfc6a416d805926e (WARDENStealer)
WARDENStealer
2026-10-08 ⋅ The Record ⋅ Alexander Martin
ASOS: Hackers tricked way into employee account before sending rogue push notification
2026-10-08 ⋅ News4hackers ⋅ Anuj
ASOS Data Breach Exposed: Social Engineering Attack and Credential Theft Revealed
2026-10-08 ⋅ Zscaler ⋅ Seongsu Park
Trojanized Terraform Provider Campaign
2026-10-08 ⋅ Gen Digital ⋅ Jan Rubín, Vojtěch Krejsa
Warden Stealer: The Rapid Rise of an Infostealer with an Appetite for AI Agent Data
WARDENStealer
2026-10-07 ⋅ GBHackers on Security ⋅ Mayura Kathir
Partisan Zmiy Malware Campaign Uses Telegram and DNS Tunneling to Target Healthcare Networks
2026-10-07 ⋅ cocomelonc ⋅ cocomelonc
Malware development trick 67: Run shellcode via CreateThreadpoolWait. C and assembly examples
2026-10-07 ⋅ Censys ⋅ Aidan Holland
DarkSword/Coruna Open Directory Finding Report
Coruna GHOSTBLADE
2026-10-07 ⋅ CrowdStrike ⋅ Ashley Campion
Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance
2026-10-07 ⋅ SOCRadar ⋅ SOCRadar
NetScaler C2: A Massive CVE-2026-88771 Exploitation Operation
2026-10-06 ⋅ SOCRadar ⋅ SOCRadar
CyberXero: An AI-Augmented Initial Access Broker Targeting Ukrainian Critical Infrastructure
2026-10-06 ⋅ Github (muha2xmad) ⋅ muha2xmad
Arabic Streaming Websites ClickFix Campaign
2026-10-06 ⋅ Huntress Labs ⋅ Harlan Carvey, Lindsey O'Donnell-Welch
Up a Creek Without a Command Line: Mapping an Akira Ransomware Attack
Akira Akira
2026-10-05 ⋅ The Record ⋅ Daryna Antoniuk
Ukraine grocery chain ATB confirms cyberattack as hackers threaten to leak data
2026-10-05 ⋅ trendai ⋅ Feike Hacquebord, Hiroyuki Kakara
Earth Sirrush: A Russia-Aligned Intrusion Set With 4 Years of Evolving Espionage Tooling
BadPaw
2026-10-05 ⋅ Github (ksi-digital) ⋅ Christophe Hubert
"Ancient": a Linux IoT botnet with a custom ANCT C2 protocol
Ancient