Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-09-04 ⋅ Rapid7 ⋅ Rapid7 Labs
DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors
2026-09-03 ⋅ Abstract Security ⋅ Abstract Security Threat Research Organization (ASTRO)
Chaotic Eclipse Releases CrowdStrike Falcon Zero-Day FalconFlank: Detection Guidance
2026-08-30 ⋅ Medium 0xzyadelzyat ⋅ Zyad Elzyat
Reverse Engineering the Auto-Color Linux Backdoor
Auto-Color
2026-08-28 ⋅ ⋅ F6 ⋅ F6
Ragnarök: F6 investigated the attacks of the VantaCore ransomware group
Babuk LockBit
2026-08-27 ⋅ Recorded Future ⋅ Insikt Group
BlueDelta Targets Defense and Diplomacy with HOOKEDGE
Headlace
2026-08-27 ⋅ Proofpoint ⋅ Kyle Cucci, Proofpoint Threat Research Team, Rob Kinner, Tony Robinson
Carry-On Compromise: TA4922 Packs PackClient
donut_injector
2026-08-26 ⋅ FBI ⋅ FBI
China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems
2026-08-26 ⋅ Lumen ⋅ Black Lotus Labs
The infrastructure quartermaster: inside a China-nexus state enablement model
2026-08-26 ⋅ Github (blacklotuslabs) ⋅ Black Lotus Labs
The infrastructure quartermaster: inside a China-nexus state enablement model (IOCs)
2026-08-26 ⋅ Abstract Security ⋅ Abstract Security Threat Research Organization (ASTRO)
RMM Hunting: Leveraging LOLRMM for Detection
2026-08-24 ⋅ Field Effect ⋅ Damon Toumbourou, Hugh Whitewood
A ClickFix cluster: Observed activity from recent ClickFix campaigns
Lorem Ipsum
2026-08-21 ⋅ Netresec ⋅ Erik Hjelmvik
CNCMachineRMS C2 Protocol
Babadeda
2026-08-20 ⋅ Wiz.io ⋅ Benjamin Read, Rami McCarthy
Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns
2026-08-20 ⋅ trendai ⋅ Aliakbar Zahravi
Prompting the Payload: How an npm Supply Chain Attack Delivers the RedC2 AI-Powered Linux Implant
redshell
2026-08-19 ⋅ Bitdefender ⋅ Gheorghe Adrian Schipor, Marius Andrei Baciu, Victor Vrabie
SilkParasite: Inside a China-nexus espionage cluster and its seven-family RAT ecosystem across Central Asia
BloodAlchemy ShadowPad SNAPPYBEE
2026-08-19 ⋅ Bitdefender ⋅ Martin Zugec
SilkParasite: Tracking a China-Nexus APT Across Central Asia
BloodAlchemy ShadowPad SNAPPYBEE SilkParasite
2026-08-18 ⋅ BitSight ⋅ Bitsight TRACE
Who Invited Aisuru to the LAN Party?
Kimwolf Aisuru
2026-08-17 ⋅ Zscaler ⋅ Zscaler ThreatLabz
C2Looper: A New Backdoor Likely Tied To Ransomware With GitHub C2
C2Looper
2026-08-15 ⋅ neso.re ⋅ neso
Borrowed Machinery: SnappyClient, HijackLoader, and a Shared Codebase?
HijackLoader SnappyClient
2026-08-14 ⋅ QUIRSO GmbH ⋅ ÇaÄŸatay Yürekli, Denis Szadkowski, Maike Orlikowski
Global Exploitation of CVE-2026–59310 by Suspected Chinese-Nexus APT & Related CVE-2026–59309 Activity