Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2025-09-19 ⋅ SentinelOne ⋅ Alex Delamotte, Gabriel Bernadett-Shapiro, Vitaly Kamluk
Prompts as Code & Embedded Keys | The Hunt for LLM-Enabled Malware
Malterminal
2025-09-18 ⋅ Hunt.io ⋅ Hunt.io
Tracking AsyncRAT via Trojanized ScreenConnect and Open Directories
AsyncRAT
2025-09-15 ⋅ Huntress Labs ⋅ Chad Hudson, Michael Elford
Huntress Threat Advisory: The Dangers of Storing Unencrypted Passwords
Akira
2025-09-11 ⋅ DataBreaches.net ⋅ Dissent
Going Dark: ShinyHunters/ScatteredSpider/LAPSUS$ Say Goodbye (2)
2025-09-10 ⋅ Hunt.io ⋅ Hunt.io
AdaptixC2 Uncovered: Capabilities, Tactics & Hunting Strategies
AdaptixC2
2025-09-09 ⋅ Huntress Labs ⋅ Jamie Levy, Lindsey O'Donnell-Welch, Michael Tigges
How an Attacker’s Blunder Gave Us a Rare Look Inside Their Day-to-Day Operations
2025-09-02 ⋅ Hunt.io ⋅ Hunt.io
From Panel to Payload: Inside the TinyLoader Malware Operation
XTinyLoader
2025-08-20 ⋅ Hunt.io ⋅ Hunt.io
APT MuddyWater Deploys Multi-Stage Phishing to Target CFOs
2025-08-18 ⋅ Trellix ⋅ Alex Lanstein, Pham Duy Phuc
The Coordinated Embassy Hunt: Unmasking the DPRK-linked GitHub C2 Espionage Campaign
XenoRAT
2025-08-14 ⋅ Hunt.io ⋅ Hunt.io
Hunt.io Exposes and Analyzes ERMAC V3.0 Banking Trojan Full Source Code Leak
ERMAC
2025-08-01 ⋅ Reverse The Malware ⋅ Diyar Saadi
Threat Hunting with 20 Urlscan.io Search Queries
2025-07-27 ⋅ Cyber Intelligence Insights ⋅ Vasilis Orlof
Bulletproof Hosting Hunt: Connecting the dots from Lumma to Qwins Ltd (ASN 213702)
Lumma Stealer
2025-06-23 ⋅ Rushter ⋅ Artem Golubin
Threat Hunting Introduction: Cobalt Strike
Cobalt Strike
2025-06-23 ⋅ Darkatlas ⋅ Darkatlas Squad
Bluenoroff (APT38) Live Infrastructure Hunting
2025-06-19 ⋅ Hunt.io ⋅ Hunt.io
Cobalt Strike Operators Leverage PowerShell Loaders Across Chinese, Russian, and Global Infrastructure
Cobalt Strike
2025-06-18 ⋅ Huntress Labs ⋅ Alden Schmidt, Jonathan Semon, Stuart Ashenbrenner
Feeling Blue(Noroff): Inside a Sophisticated DPRK Web3 Intrusion
2025-06-12 ⋅ Symantec ⋅ Carbon Black, Threat Hunter Team
Fog Ransomware: Unusual Toolset Used in Recent Attack
Fog
2025-06-05 ⋅ Hunt.io ⋅ Hunt.io
Abusing Paste.ee to Deploy XWorm and AsyncRAT Across Global C2 Infrastructure
AsyncRAT XWorm
2025-05-09 ⋅ Lumen ⋅ Chris Formosa, Ryan English
Classic Rock: Hunting a Botnet that preys on the Old
2025-05-09 ⋅ Lumen ⋅ Black Lotus Labs
Classic Rock: Hunting a Botnet that preys on the Old