Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-07-11 ⋅ BBC ⋅ Joe Tidy
Predatory Sparrow: Who are the hackers who say they started a fire in Iran?
Predatory Sparrow
2022-07-11 ⋅ The DFIR Report ⋅ The DFIR Report
SELECT XMRig FROM SQLServer
Bondnet
2022-07-11 ⋅ Soc Investigation ⋅ BalaGanesh
Threat Actors Delivers New Rozena backdoor with Follina Bug – Detection & Response
Rozena
2022-07-11 ⋅ Security Affairs ⋅ Pierluigi Paganini
Anubis Networks is back with new C2 server
Anubis
2022-07-10 ⋅ Seguranca Informatica ⋅ Pedro Tavares
Anubis Network is back with new C2 server
2022-07-10 ⋅ Minerva Labs ⋅ Natalie Zargarov
Lockbit 3.0 AKA Lockbit Black is here, with a new icon, new ransom note, new wallpaper, but less evasiveness?
LockBit
2022-07-09 ⋅ Artik Blue ⋅ Artik Blue
Malware analysis with IDA/Radare2 - Basic Unpacking (Dridex first stage)
Dridex
2022-07-09 ⋅ spookysec ⋅ Ronnie
Analyzing a Brute Ratel Badger
Brute Ratel C4
2022-07-08 ⋅ K7 Security ⋅ Harihara Sudhan
Beware of Root Certs in VPN
2022-07-08 ⋅ MalwareBookReports ⋅ muzi
CRULOADER: ZERO2AUTO
CruLoader
2022-07-08 ⋅ Sekoia ⋅ sekoia
Vice Society: a discreet but steady double extortion ransomware group
HelloKitty Zeppelin
2022-07-08 ⋅ ⋅ Cert-AgID ⋅ Cert-AgID
Il malware EnvyScout (APT29) è stato veicolato anche in Italia
EnvyScout Unidentified 098 (APT29 Slack Downloader)
2022-07-08 ⋅ Sekoia ⋅ Threat & Detection Research Team
Vice Society: a discreet but steady double extortion ransomware group
HelloKitty
2022-07-08 ⋅ Twitter (@billyleonard) ⋅ Billy Leonard
Twiiter thread about some recent Turla activity spoofing the Azov Regiment ... but targeting Android users.
2022-07-08 ⋅ Blueliv ⋅ Jose Miguel Esparza
Ransomware as a Service: Behind the Scenes
2022-07-07 ⋅ SOCRadar ⋅ SOCRadar
Brute Ratel Utilized By Threat Actors In New Ransomware Operations
Brute Ratel C4
2022-07-07 ⋅ JPCERT/CC ⋅ Shusei Tomonaga
YamaBot Malware Used by Lazarus
YamaBot
2022-07-07 ⋅ Fortinet ⋅ Erin Lin
Notable Droppers Emerge in Recent Threat Campaigns
BumbleBee Emotet PhotoLoader QakBot
2022-07-07 ⋅ IBM ⋅ Charlotte Hammond, Kat Weinberger, Ole Villadsen
Unprecedented Shift: The Trickbot Group is Systematically Attacking Ukraine
AnchorMail BumbleBee Cobalt Strike IcedID Meterpreter
2022-07-07 ⋅ SANS ISC ⋅ Brad Duncan
Emotet infection with Cobalt Strike
Cobalt Strike Emotet