Click here to download all references as Bib-File.•
| 2025-09-23
⋅
Zscaler
⋅
YiBackdoor: A New Malware Family With Links to IcedID and Latrodectus YiBackdoor |
| 2025-09-19
⋅
BlackPoint
⋅
KeyZero: A Custom PowerShell RAT |
| 2025-09-19
⋅
zensec
⋅
Unmasking Akira: The ransomware tactics you can’t afford to ignore Akira Akira |
| 2025-09-18
⋅
Hunt.io
⋅
Tracking AsyncRAT via Trojanized ScreenConnect and Open Directories AsyncRAT |
| 2025-09-18
⋅
Lumen
⋅
SystemBC – Bringing the Noise SystemBC SystemBC |
| 2025-09-17
⋅
Bitdefender
⋅
EggStreme Malware: Unpacking a New APT Framework Targeting a Philippine Military Company |
| 2025-09-17
⋅
Morado
⋅
GLOBAL Ransomware - New Tactics Revealed Global |
| 2025-09-16
⋅
Wiz.io
⋅
Shai-Hulud: Ongoing Package Supply Chain Worm Delivering Data-Stealing Malware Shai-Hulud |
| 2025-09-15
⋅
DeXpose
⋅
Threat Actor Profile: APT27 |
| 2025-09-15
⋅
Qianxin
⋅
The Most Powerful Ever? Inside the 11.5Tbps-Scale Mega Botnet AISURU Aisuru |
| 2025-09-14
⋅
cocomelonc
⋅
Malware development: persistence - part 28. CertPropSvc registry hijack. Simple C/C++ example |
| 2025-09-12
⋅
Medium (@zyadlzyatsoc)
⋅
XWorm Malware Analysis: SOC & IR Perspective on Persistence, C2, and Anti-Analysis Tactics XWorm |
| 2025-09-11
⋅
IBM X-Force
⋅
Hive0154, aka Mustang Panda, drops updated Toneshell backdoor and novel SnakeDisk USB worm PUBLOAD SnakeDisk TONESHELL Yokai |
| 2025-09-11
⋅
Zero Day
⋅
How the Infamous APT-1 Report Exposing China’s PLA Hackers Came to Be |
| 2025-09-11
⋅
Trend Micro
⋅
EvilAI Operators Use AI-Generated Code and Fake Apps for Far-Reaching Attacks TamperedChef |
| 2025-09-11
⋅
DataBreaches.net
⋅
Going Dark: ShinyHunters/ScatteredSpider/LAPSUS$ Say Goodbye (2) |
| 2025-09-10
⋅
Hunt.io
⋅
AdaptixC2 Uncovered: Capabilities, Tactics & Hunting Strategies AdaptixC2 |
| 2025-09-10
⋅
Palo Alto Networks Unit 42
⋅
AdaptixC2: A New Open-Source Framework Leveraged in Real-World Attacks AdaptixC2 |
| 2025-09-09
⋅
Huntress Labs
⋅
How an Attacker’s Blunder Gave Us a Rare Look Inside Their Day-to-Day Operations |
| 2025-09-08
⋅
Fortinet
⋅
MostereRAT Deployed AnyDesk/TightVNC for Covert Full Access MostereRAT |