Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-06-08 ⋅ SYGNIA ⋅ Sygnia Team
Velvet Ant’s Operation Highland: How a China-Nexus Actor Infiltrated an Internal Network Undetected
2026-06-08 ⋅ StepSecurity ⋅ Rohan Prabhu
The Hades Campaign: Graph ML PyPI Packages Deploy Cross-Platform Memory Scrapers, AI Analyst Misdirection, and a Wiper Deterrent
Shai-Hulud
2026-06-04 ⋅ RESIDENT.NGO ⋅ RESIDENT.NGO Team
Case Study — UNC1151 Gmail Phishing (“Suspicious account activity”) Targeting Belarusian Pro-Democracy Politician, May 2026
2026-06-03 ⋅ Check Point Research ⋅ Alexey Bukhteyev
Impersonation, Click Hijacking, and TDS: Inside a Malware Distribution Ecosystem
AnimateClipper Remus
2026-06-03 ⋅ Microsoft ⋅ Microsoft
How Microsoft names threat actors
Wisteria Tsunami
2026-06-03 ⋅ sonatype ⋅ Sonatype Security Research Team
Lazarus Group's Latest: Brandjacking Campaign on npm
2026-06-02 ⋅ Qualys ⋅ Aniket Harne
The HazyBeacon Protocol – How Malware Weaponizes Amazon Web Services (AWS) Lambda Function URLs
CL-STA-1020
2026-06-01 ⋅ ExaTrack ⋅ ExaTrack
Tracking APT28 PixyNetLoader: Evolutions from 2024 to 2026
PixyNetLoader
2026-05-31 ⋅ Socket ⋅ Kirill Boychenko
Famous Chollima Targets PHP Developers Through Compromised Packagist Package
JADESNOW
2026-05-28 ⋅ neso.re ⋅ neso
ClickFix x HijackLoader: Dissecting a Live Stealer Campaign - Part 2
HijackLoader
2026-05-28 ⋅ eSentire ⋅ eSentire
Nimbus RAT: How Threat Actors Are Abusing Microsoft Teams and Google Drive to Deploy a Java RAT
2026-05-28 ⋅ ESET Research ⋅ ESET Research
ESET APT Activity Report Q4 2025–Q1 2026
WAVESHAPER BirdCall BLINDINGCAN RokRAT Rook Tiger RAT
2026-05-28 ⋅ Mohammad Kazem Hassan Nejad
GREYVIBE: A Russia-nexus group leveraging AI across state-aligned operations
LegionRelay PhantomRelay
2026-05-28 ⋅ WithSecure ⋅ Mohammad Kazem Hassan Nejad
GREYVIBE: A Russia-nexus group leveraging AI across state-aligned operations
GreyVibe
2026-05-28 ⋅ LevelBlue ⋅ Maor Gabay
Sapphire Sleet Targets macOS in Multi-Stage Intrusion Campaign
2026-05-27 ⋅ Wiz.io ⋅ Andre Maccarone, Benjamin Read, Eden Abergil, Shira Ayal, Yuval Dan
Commit to Compromise: A New Threat Actor Targeting the Cryptocurrency Industry's Software Development Infrastructure
JINX-0164
2026-05-26 ⋅ Intrinsec ⋅ CTI Intrinsec, David Sardinha
Pivoting on a malspam infrastructure delivering JS malware backed by bulletproof networks
2026-05-21 ⋅ PWC ⋅ PwC Threat Intelligence
Inside Red Lamassu’s JFMBackdoor
JFMBackdoor Calypso
2026-05-20 ⋅ Seqrite Labs ⋅ Dixit Panchal, Kartik Jivani, Vaibhav Krushna Billade
Operation Dragon Whistle: UNG0002 Targets Chinese Academia via Weaponized Institutional Lure
Cobalt Strike
2026-05-20 ⋅ Hackernoon ⋅ Mrwriteup
ZeffSec Resurfaces on Telegram, Claims Breach of Gozine2.ir
ZeffSec