Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-05-14 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Kazuar: Anatomy of a nation-state botnet
Kazuar
2026-05-12 ⋅ Symantec ⋅ Threat Hunter Team
Jewelbug: APT Group Runs Espionage and Crypto Fraud Operations Side by Side
Earth Alux REF7707
2026-05-11 ⋅ Qianxin ⋅ QiAnXin XLab Team
Threat Actor Mr_Rot13 Actively Exploits CVE-2026-41940 for Backdoor Deployment
Mr_Rot13
2026-05-11 ⋅ ThreatFabric ⋅ ThreatFabric
New TrickMo Variant: Device Take Over malware targeting Banking, Fintech, Wallet & Auth apps
TrickMo
2026-04-27 ⋅ Red Piranha ⋅ Red Piranha
Weekly Detected Threats - April 21 - April 27 2026
Lamashtu
2026-04-15 ⋅ ⋅ Cert-UA ⋅ Cert-UA
Hospitals, local governments, and FPV operators are in the focus of the UAC-0247 (UAC-0244) cyber threat cluster
SILENTLOOP AGINGFLY Chisel Havoc xmrig
2026-04-14 ⋅ Gen ⋅ Gen Threat Labs
Chasing an Angry Spark
2026-04-10 ⋅ Infoblox ⋅ Chong Lua Dao, Infoblox Threat Intel
Scams, Slaves and (Malware-as-a) Service: Tracking a Trojan to Cambodia’s Scam Centers
2026-04-09 ⋅ ⋅ F6 ⋅ F6
Eastern Signature: Investigating a Cyberattack by an Asian Threat Group
ShadowPad
2026-04-07 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
SOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks
2026-04-01 ⋅ SOC Prime ⋅ Daryna Olyniychuk
UAC-0255 Attack Detection: Threat Actors Impersonate CERT-UA to Infect Ukrainian Public and Private Sector Organizations With AGEWHEEZE RAT
AGEWHEEZE Cyber Serp
2026-03-31 ⋅ Google ⋅ Adrian Hernandez, Ashley Zaya, Austin Larsen, Christopher Gardner, Dima Lenz, Michael Rudden, Mon Liclican, Tyler McLellan
North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack
WAVESHAPER
2026-03-26 ⋅ Unit 42
Converging Interests: Analysis of Threat Clusters Targeting a Southeast Asian Government
MASOL
2026-03-23 ⋅ Sophos ⋅ Sophos Counter Threat Unit Research Team
NICKEL ALLEY strategy: Fake it ‘til you make it
PylangGhost GolangGhost Nickel Alley
2026-03-22 ⋅ Christoffer Strömblad ⋅ Christoffer Strömblad
Threat Assessment: TeamPCP - CanisterWorm & Kubernetes Wiper Campaign
TeamPCP
2026-03-20 ⋅ Nextron Systems ⋅ Pezier Pierre-Henri
RegPhantom Backdoor Threat Analysis
RegPhantom
2026-03-19 ⋅ Sophos ⋅ Sophos Counter Threat Unit Research Team
Android devices ship with firmware-level malware
Keenadu
2026-03-18 ⋅ Google ⋅ Google Threat Intelligence Group
The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors
GHOSTBLADE UNC6748
2026-03-18 ⋅ Google ⋅ Google Threat Intelligence Group
The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors
GHOSTBLADE
2026-03-12 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Storm-2561 uses SEO poisoning to distribute fake VPN clients for credential theft
Storm-2561