Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2019-12-10 ⋅ Sentinel LABS ⋅ Jason Reaves, Joshua Platt, Vitali Kremez
Anchor Project | The Deadly Planeswalker: How The TrickBot Group United High-Tech Crimeware & APT
Anchor
2019-12-02 ⋅ Twitter (@VK_intel) ⋅ Vitali Kremez
Tweet on Socelars Stealer
Socelars
2019-11-05 ⋅ Twitter (@VK_intel) ⋅ Vitali Kremez
Tweet on Possible Snatch
Snatch
2019-10-24 ⋅ Sentinel LABS ⋅ Vitali Kremez
How TrickBot Malware Hooking Engine Targets Windows 10 Browsers
TrickBot
2019-10-17 ⋅ Vitali Kremez
Let's Learn: Dissecting Lazarus Windows x86 Loader Involved in Crypto Trading App Distribution: "snowman" & ADVObfuscator
AppleJeus
2019-10-11 ⋅ Twitter (@VK_intel) ⋅ Vitali Kremez
Possible Lazarus x86 Malware (AppleJeus)
AppleJeus
2019-09-11 ⋅ Twitter (@VK_intel) ⋅ Vitali Kremez
Tweet on Stealer/Uploader
Ryuk Stealer
2019-08-24 ⋅ Github (k-vitali) ⋅ Vitali Kremez
Notes on Nemty Ransomware
Nemty
2019-07-12 ⋅ Twitter (@VK_intel) ⋅ Vitali Kremez
ATM Malware Pin/PAN Card Offline Skimmer XFSADM
XFSADM
2019-06-19 ⋅ Twitter (@VK_intel) ⋅ Vitali Kremez
Tweet on Mach-O & PE32 Payloads
PowerCat
2019-06-04 ⋅ SlideShare ⋅ Vitali Kremez
Inside Cybercrime Groups Harvesting Active Directory for Fun and Profit - Vitali Kremez
TrickBot
2019-05-09 ⋅ Sentinel LABS ⋅ Vitali Kremez
RobinHood Ransomware “CoolMaker” Functions Not So Cool
RobinHood
2019-04-25 ⋅ Twitter (@VK_intel) ⋅ Vitali Kremez
Tweet on Ransomware
RobinHood
2019-04-13 ⋅ GitHub ⋅ Vitali Kremez
Decoded Turla Powershell Implant
PowerShellRunner
2019-03-28 ⋅ Vitali Kremez Blog ⋅ Vitali Kremez
Let's Learn: Dissecting Operation ShadowHammer Shellcode Internals in crt_ExitProcess
shadowhammer
2019-01-17 ⋅ Twitter (@VK_intel) ⋅ Vitali Kremez
Tweet on Turla Outlook Backdoor
Outlook Backdoor
2019-01-15 ⋅ Flashpoint ⋅ Vitali Kremez
Disclosure of Chilean Redbanc Intrusion Leads to Lazarus Ties
PowerRatankba
2019-01-07 ⋅ Vitali Kremez
Let's Learn: Deeper Dive into Gamaredon Group Pteranodon Implant Version '_512'
Pteranodon
2018-12-21 ⋅ Vitali Kremez
Let's Learn: In-Depth on APT28/Sofacy Zebrocy Golang Loader
Zebrocy
2018-12-10 ⋅ Vitali Kremez Blog ⋅ Vitali Kremez
Let's Learn: Reviewing Sofacy's "Zebrocy" C++ Loader: Advanced Insight
Zebrocy