Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2018-06-13 ⋅ Acalvio ⋅ Team Acalvio
Lateral Movement Technique Employed by Hidden Cobra
Brambul Joanap
2018-06-08 ⋅ JPCERT/CC ⋅ Shusei Tomonaga
PLEAD Downloader Used by BlackTech
PLEAD
2018-06-07 ⋅ Gigamon ⋅ Chenming Xu, Dan Caselden, Jason Jones, Justin Warner
Adobe Flash Zero-Day Leveraged for Targeted Attack in Middle East - Gigamon ATR Blog
Chainshot
2018-06-06 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
Sofacy Group’s Parallel Attacks
Koadic Zebrocy
2018-06-06 ⋅ Guardicore ⋅ Daniel Goldberg, Mor Matal, Ofri Ziv
Operation Prowli: Monetizing 40,000 Victim Machines
r2r2
2018-05-31 ⋅ Lastline ⋅ Andy Norton, David Wells, Luukas Larinkoski, Stefano Ortolani
APT28 Rollercoaster: The Lowdown on Hijacked Lo
2018-05-31 ⋅ Cisco Talos ⋅ Jungsoo An, Paul Rascagnères, Warren Mercer
NavRAT Uses US-North Korea Summit As Decoy For Attacks In South Korea
NavRAT
2018-05-31 ⋅ Proofpoint ⋅ Proofpoint Staff
DanaBot - A new banking Trojan surfaces Down Under
DanaBot
2018-05-29 ⋅ US-CERT ⋅ US-CERT
Alert (TA18-149A): HIDDEN COBRA – Joanap Backdoor Trojan and Brambul Server Message Block Worm
Brambul Joanap
2018-05-29 ⋅ Twitter (@Racco42) ⋅ Racco42
Tweet on VBS Code Obfuscation
ARS VBS Loader
2018-05-29 ⋅ Group-IB ⋅ Rustam Mirkasymov
Cobalt Renaissance: new attacks and joint operations
CobInt
2018-05-28 ⋅ Github (valsov) ⋅ valsov
BackNet
BackNet
2018-05-25 ⋅ 360 ⋅ 360 Helios Team
Analysis of CVE-2018-8174 VBScript 0day and APT actor related to Office targeted attack
Retro
2018-05-25 ⋅ ESET Research ⋅ Michal Poslušný
BackSwap malware finds innovative ways to empty bank accounts
BackSwap
2018-05-23 ⋅ Department of Justice ⋅ Office of Public Affairs
Justice Department Announces Actions to Disrupt Advanced Persistent Threat 28 Botnet of Infected Routers and Network Storage Devices
VPNFilter APT28
2018-05-21 ⋅ ⋅ LAC ⋅ Yoshihiro Ishikawa
Confirmed new attacks by APT attacker group menuPass (APT10)
Cobalt Strike
2018-05-20 ⋅ Youtube (OALabs) ⋅ Sergei Frankoff
Unpacking Gootkit Part 2 - Debugging Anti-Analysis Tricks With IDA Pro and x64dbg
GootKit
2018-05-17 ⋅ Minerva Labs ⋅ Gal Bitensky
Analyzing an AZORult Attack – Evasion in a Cloak of Multiple Layers
Azorult
2018-05-15 ⋅ BSides Detroit ⋅ Keven Murphy, Stefano Maccaglia
IR in Heterogeneous Environment
Korlia Poison Ivy
2018-05-15 ⋅ Telefonica ⋅ Telefonica
N40, the botnet created in Brazil which evolves to attack the Chilean banking sector
N40