Click here to download all references as Bib-File.•
| 2021-09-21
⋅
skyblue.team blog
⋅
Scanning VirusTotal's firehose Cobalt Strike |
| 2021-09-21
⋅
Sophos
⋅
Cring ransomware group exploits ancient ColdFusion server Cobalt Strike Cring |
| 2021-09-21
⋅
Nozomi Networks
⋅
BlackMatter Ransomware Technical Analysis and Tools from Nozomi Networks Labs BlackMatter |
| 2021-09-21
⋅
GuidePoint Security
⋅
A Ransomware Near Miss: ProxyShell, a RAT, and Cobalt Strike Cobalt Strike |
| 2021-09-21
⋅
Talos Intelligence
⋅
TinyTurla - Turla deploys new malware to keep a secret backdoor on victim machines TinyTurla |
| 2021-09-21
⋅
Corelight
⋅
Using Zeek to track communication state |
| 2021-09-21
⋅
Medium elis531989
⋅
The Squirrel Strikes Back: Analysis of the newly emerged cobalt-strike loader “SquirrelWaffle” Cobalt Strike Squirrelwaffle |
| 2021-09-20
⋅
DataBreaches.net
⋅
ALTDOS claims to have hacked one of Malaysia’s biggest conglomerates ALTDOS |
| 2021-09-20
⋅
SentinelOne
⋅
Defeating macOS Malware Anti-Analysis Tricks with Radare2 EvilQuest |
| 2021-09-20
⋅
Chainanalysis
⋅
Chainalysis in Action: OFAC Sanctions Russian Cryptocurrency OTC Suex that Received Over $160 million from Ransomware Attackers, Scammers, Darknet Markets, and Seized Exchange BTC-e |
| 2021-09-20
⋅
⋅
Rostelecom-Solar
⋅
How we searched for a connection between Mēris and Glupteba, and gained control over 45 thousand MikroTik devices Glupteba |
| 2021-09-20
⋅
Trend Micro
⋅
Water Basilisk Uses New HCrypt Variant to Flood Victims with RAT Payloads Ave Maria BitRAT LimeRAT Nanocore RAT NjRAT Quasar RAT |
| 2021-09-20
⋅
Twitter (@ESETresearch)
⋅
Tweet on Dark.IoT Botnet exploiting critical Azure vulnerability CVE-2021-38647 #OMIGOD Dark |
| 2021-09-19
⋅
NetbyteSEC
⋅
Discovering Linux ELF Beacon of Cobalt Strike Tool Vermilion Strike |
| 2021-09-19
⋅
HP
⋅
MirrorBlast and TA505: Examining Similarities in Tactics, Techniques and Procedures MirrorBlast |
| 2021-09-19
⋅
The Record
⋅
Alaska discloses ‘sophisticated’ nation-state cyberattack on health service |
| 2021-09-17
⋅
Group-IB
⋅
Scamdemic outbreak Scammers attack users in Middle Eastern countries |
| 2021-09-17
⋅
CrowdStrike
⋅
Falcon OverWatch Hunts Down Adversaries Where They Hide BazarBackdoor Cobalt Strike |
| 2021-09-17
⋅
cyble
⋅
Sophisticated Spyware Posing as a Banking Application To Target Korean Users Unidentified APK 006 |
| 2021-09-17
⋅
Avast
⋅
DirtyMoe: Code Signing Certificate DirtyMoe |