Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-07-13 ⋅ kienmanowar Blog ⋅ m4n0w4r, Tran Trung Kien
[QuickNote] SolidPDFCreator – Mustang Panda Stage-1 Backdoor (Target India)
2026-07-07 ⋅ Proofpoint ⋅ Greg Lesnewich, Mark Kelly, Proofpoint Threat Research Team
One Email Closer to the Edge: UNK_MassTraction & the Physics of Exploitation
IceCube
2026-07-01 ⋅ Fortinet ⋅ Rachael Liao
Analysis of Ongoing Ousaban Attacks Targeting the Iberian Peninsula
Ousaban
2026-07-01 ⋅ Socket ⋅ Karlo Zanki
PolinRider: North Korea-Linked Supply Chain Campaign Expands Across Open Source Ecosystems
JADESNOW
2026-06-29 ⋅ BlackPoint ⋅ Nevan Beal, Sam Decker
A Djinn in the Machine: TaskWeaver’s Node.js Intrusion Chain
2026-06-28 ⋅ Acronis ⋅ Santiago Pontiroli, Subhajeet Singha
Mustang Panda targets India's government and energy sectors with ZOHOMURK and MINIRECON
MINIRECON ZOHOMURK
2026-06-25 ⋅ Microsoft Security ⋅ Microsoft Defender Experts, Microsoft Defender Security Research Team, Parth Jomadkar
Photo ZIP campaign targeting hospitality industry delivers Node.js implant for persistent access
TonRAT
2026-06-24 ⋅ BitSight ⋅ Bitsight TRACE
Amadey and StealC: Malware-as-a-Service Unavailable
Amadey Stealc
2026-06-24 ⋅ JFrog Security ⋅ Guy Korolevski, Yair Benamou
Hijacked npm Packages Use Novel VSCode Autorun and Blockchain Dead Drops to Deploy a Credential/Crypto Stealer
JADESNOW
2026-06-23 ⋅ Sentinel LABS ⋅ Phil Stokes
macOS.Gaslight | Rust Backdoor Turns Prompt Injection on the Analyst, Not the Sandbox
Gaslight
2026-06-17 ⋅ Medium ⋅ Jason Reaves, Joshua Platt
MetaStealer traffic, new DGAs and analyzing the “tracker” backdoor DGA with AI
Potemkin
2026-06-17 ⋅ Rapid7 ⋅ Anna Širokova
Malware à la Mode: Tracking Dropping Elephant Tradecraft Through a China-Themed Loader Chain
Unidentified 125 (RAT, Dropping Elephant)
2026-06-17 ⋅ Microsoft ⋅ Microsoft Defender Research Team
From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet
2026-06-17 ⋅ TechRepublic ⋅ Kezia Jungco
Ozempic Maker Novo Nordisk Confirms Security Incident After $25M Hacker Demand
FulcrumSec
2026-06-16 ⋅ Huntress Labs ⋅ Anna Pham, Zach Rogers
Potemkin Loader & RMMProject - The Anatomy of a ClickFix Attack
EtherRAT Chisel Potemkin
2026-06-16 ⋅ Checkmarx ⋅ Pavan Gudimalla
ChainVeil: A Malicious npm Supply Chain Attack by SuccessKey
JADESNOW
2026-06-16 ⋅ Resecurity ⋅ Resecurity
Cybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise
FulcrumSec
2026-06-15 ⋅ Google ⋅ John McGuiness, Patrick Whitsell
"Public and Private Medical Community Targeted by China-Nexus Threat Actor Pursuing Artificial Intelligence, Cyber, Medical, and National Defense Research
UNC6508
2026-06-12 ⋅ SafeDep ⋅ SafeDep
astro.config.mjs Supply Chain Attack via Blockchain C2
JADESNOW
2026-06-11 ⋅ Spamhaus ⋅ Jonas Arnold
Bulletproof Hosting: Cutting off the facilitators