Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-11-15 ⋅ Malwarebytes ⋅ Jovi Umawing
Evasive maneuvers: HTML smuggling explained
2021-11-15 ⋅ TRUESEC ⋅ Fabio Viggiani
ProxyShell, QBot, and Conti Ransomware Combined in a Series of Cyberattacks
Cobalt Strike Conti QakBot
2021-11-15 ⋅ cyber.wtf blog ⋅ Luca Ebach
Guess who’s back
Emotet
2021-11-14 ⋅ Github (gabrielcurrie) ⋅ Gabriel Currie
Ready for (nearly) anything: Five things to prepare for a cyber security incident
2021-11-14 ⋅ Twitter (@f0wlsec) ⋅ Marius Genheimer
A static config extractor for the main component of DanaBot
DanaBot
2021-11-13 ⋅ ZAYOTEM ⋅ Halil Filik, Mustafa Günel
Alien Technical Analysis Report
Alien
2021-11-13 ⋅ YouTube (AGDC Services) ⋅ AGDC Services
Automate Qbot Malware String Decryption With Ghidra Script
QakBot
2021-11-13 ⋅ Just Still ⋅ Still Hsu
Threat Spotlight - Domain Fronting
Cobalt Strike
2021-11-13 ⋅ Trend Micro ⋅ Ian Kenefick, Vladimir Kropotov
QAKBOT Loader Returns With New Techniques and Tools
QakBot
2021-11-12 ⋅ Twitter (@3xp0rtblog) ⋅ 3xp0rt
Tweets on DarkLoader
DarkLoader
2021-11-12 ⋅ Twitter (@Arkbird_SOLG) ⋅ Arkbird
Tweets on Void Balaur using QuantLoader and ZStealer
QuantLoader ZStealer
2021-11-12 ⋅ Trend Micro ⋅ Ian Kenefick, Vladimir Kropotov
The Prelude to Ransomware: A Look into Current QAKBOT Capabilities and Global Activities
QakBot
2021-11-12 ⋅ 360 netlab ⋅ Alex.Turing, Hui Wang, YANG XU
Malware uses namesilo Parking pages and Google's custom pages to spread
2021-11-12 ⋅ Malwarebytes ⋅ Hossein Jazi
A multi-stage PowerShell based attack targets Kazakhstan
Cobalt Strike
2021-11-12 ⋅ Living Code ⋅ Dominik Degroot
AgentTesla dropped via NSIS installer
Agent Tesla
2021-11-12 ⋅ CUJOAI ⋅ Albert Zsigovits
New Threat Alert: Krane Malware
2021-11-12 ⋅ CrowdStrike ⋅ Anmol Maurya
Golang Malware Is More than a Fad: Financial Motivation Drives Adoption
Snatch
2021-11-12 ⋅ Recorded Future ⋅ Insikt Group®
The Business of Fraud: Botnet Malware Dissemination
Mozi Dridex IcedID QakBot TrickBot
2021-11-12 ⋅ jmpesp.me ⋅ m0rv4i
Malware Analysis: Syscalls: Examining how to analyse malware that uses syscalls as opposed to API calls
2021-11-11 ⋅ vmware ⋅ Giovanni Vigna, Jason Zhang, Stefano Ortolani, Threat Analysis Unit
Research Recap: How To Automate Malware Campaign Detection With Telemetry Peak Analyzer
Phorpiex QakBot