Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2023-11-17 ⋅ Cisco Talos ⋅ Guilherme Venere
A deep dive into Phobos ransomware, recently deployed by 8Base group
8Base Phobos
2023-11-17 ⋅ Cisco Talos ⋅ Guilherme Venere
Understanding the Phobos affiliate structure and activity
Phobos
2023-11-01 ⋅ SANS ISC ⋅ Xavier Mertens
Malware Dropped Through a ZPAQ Archive
2023-10-25 ⋅ Cisco Talos ⋅ Asheer Malhotra, Vitor Ventura
Kazakhstan-associated YoroTrooper disguises origin of attacks as Azerbaijan
Ave Maria Loda YoroTrooper
2023-10-13 ⋅ Elastic ⋅ Cyril François
Disclosing the BLOODALCHEMY backdoor
BloodAlchemy REF5961
2023-09-28 ⋅ Cisco Talos ⋅ Jonathan Munshaw
The security pitfalls of social media sites offering ID-based authentication
RansomVC
2023-09-25 ⋅ NSFOCUS ⋅ NSFOCUS
Warning: Newly Discovered APT Attacker AtlasCross Exploits Red Cross Blood Drive Phishing for Cyberattack
AtlasAgent AtlasCross
2023-09-19 ⋅ Cisco Talos ⋅ Arnaud Zobec, Asheer Malhotra, Caitlin Huey, Sean Taylor, Vitor Ventura
New ShroudedSnooper actor targets telecommunications firms in the Middle East with novel Implants
HTTPSnoop PipeSnoop LightBasin ShroudedSnooper
2023-09-11 ⋅ Symantec ⋅ Symantec Threat Intelligence
Tweet about Symantec discovering a new variant of SiestaGraph
SiestaGraph
2023-09-07 ⋅ Silent Push ⋅ Silent Push
'From Russia with a 71': Uncovering Gamaredon's fast flux infrastructure. New apex domains and ASN/IP diversity patterns discovered
2023-09-04 ⋅ AhnLab ⋅ Sanseo
CHM Malware Using Fukushima Contaminated Water Discharge: RedEyes (ScarCruft)
2023-08-31 ⋅ Cisco Talos ⋅ Edmund Brumaghin
SapphireStealer: Open-source information stealer enables credential and data theft
2023-08-24 ⋅ Cisco Talos ⋅ Asheer Malhotra, Jungsoo An, Vitor Ventura
Lazarus Group's infrastructure reuse leads to discovery of new malware
Collection RAT
2023-08-24 ⋅ Cisco Talos ⋅ Asheer Malhotra, Jungsoo An, Vitor Ventura
Lazarus Group exploits ManageEngine vulnerability to deploy QuiteRAT
QuiteRAT
2023-08-23 ⋅ Logpoint ⋅ Anish Bogati, Nischal khadgi
Defending Against 8base: Uncovering Their Arsenal and Crafting Responses
8Base Phobos SmokeLoader SystemBC
2023-08-14 ⋅ Group-IB ⋅ Artem Grischenko, Pavel Naumov
Breaking down Gigabud banking malware with Group-IB Fraud Matrix
Gigabud
2023-08-10 ⋅ CrowdStrike ⋅ Counter Adversary Operations, Ken Balint, Marco Ortisi, Nicolas Zilio
Discovering and Blocking a Zero-Day Exploit with CrowdStrike Falcon Complete: The Case of CVE-2023-36874
2023-08-10 ⋅ Twitter (@malwrhunterteam) ⋅ MalwareHunterTeam
Tweet on the sample discovery
Unidentified 109 (Lazarus?)
2023-08-08 ⋅ Cisco Talos ⋅ Cisco Talos
What Cisco Talos knows about the Rhysida ransomware
Rhysida
2023-08-07 ⋅ Cisco Talos ⋅ Chetan Raghuprasad
New threat actor targets Bulgaria, China, Vietnam and other countries with customized Yashma ransomware
Chaos