Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-01-11 ⋅ Recorded Future ⋅ Insikt Group®
Combating Human Trafficking With Threat Intelligence
2022-01-11 ⋅ ESET Research ⋅ Michal Poslušný
Signed kernel drivers – Unguarded gateway to Windows’ core
InvisiMole LoJax RobinHood Slingshot
2022-01-11 ⋅ CISA, FBI, NSA
Understanding and Mitigating Russian State- Sponsored Cyber Threats to U.S. Critical Infrastructure
2022-01-11 ⋅ CrowdStrike ⋅ Anmol Maurya
TellYouThePass Ransomware Analysis Reveals a Modern Reinterpretation Using Golang
TellYouThePass
2022-01-11 ⋅ Check Point ⋅ Check Point Research
APT35 exploits Log4j vulnerability to distribute new modular PowerShell toolkit
APT35
2022-01-11 ⋅ Cybereason ⋅ Chen Erlich, Daichi Shimabukuro, Niv Yona, Ofir Ozer, Omri Refaeli
Threat Analysis Report: DatopLoader Exploits ProxyShell to Deliver QBOT and Cobalt Strike
Cobalt Strike QakBot Squirrelwaffle
2022-01-11 ⋅ Intezer ⋅ Avigayil Mechtinger, Nicole Fishbein, Ryan Robinson
New SysJoker Backdoor Targets Windows, Linux, and macOS
SysJoker SysJoker SysJoker
2022-01-10 ⋅ splunk ⋅ Splunk Threat Research Team
Detecting Malware Script Loaders using Remcos: Threat Research Release December 2021
Remcos
2022-01-10 ⋅ Lab52 ⋅ ml10
TokyoX: DLL side-loading an unknown artifact
TokyoX
2022-01-10 ⋅ Fortinet ⋅ Fred Gutierrez, Shunichi Imano
COVID Omicron Variant Lure Used to Distribute RedLine Stealer
RedLine Stealer
2022-01-10 ⋅ Cado Security ⋅ Matt Muir
Abcbot - An Evolution of Xanthe
Abcbot Xanthe
2022-01-09 ⋅ Github (xephora) ⋅ @x3ph1
Observed malicious IOCs for the ChromeLoader/CS_installer aka Choziosi Loader Malware
Choziosi Choziosi
2022-01-09 ⋅ YouTube (0xca7) ⋅ 0xca7
Cat vs. RAT II - Bitrat
BitRAT
2022-01-09 ⋅ Atomic Matryoshka ⋅ z3r0day_504
Malware Headliners: Dridex
Dridex
2022-01-09 ⋅ forensicitguy ⋅ Tony Lambert
Inspecting a PowerShell Cobalt Strike Beacon
Cobalt Strike
2022-01-09 ⋅ muha2xmad ⋅ Muhammad Hasan Ali
Unpacking Vmprotect packer
2022-01-09 ⋅ Twitter (@sixdub) ⋅ Justin Warner
Tweet on malicious document used by Gamaredon aka DEV-0157
2022-01-08 ⋅ muha2xmad ⋅ Muhammad Hasan Ali
Unpacking Hancitor malware
Hancitor
2022-01-08 ⋅ Bleeping Computer ⋅ Lawrence Abrams
Trojanized dnSpy app drops malware cocktail on researchers, devs
Quasar RAT
2022-01-07 ⋅ Cloudsek ⋅ Anandeshwar Unnikrishnan, Deepanjli Paulraj
Technical Analysis of Code-Signed “Blister” Malware Campaign (Part 1)
Blister