Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-03-15 ⋅ Microsoft ⋅ Microsoft Security Response Center
One-Click Microsoft Exchange On-Premises Mitigation Tool – March 2021
2021-03-12 ⋅ HealthcareInfoSecurity ⋅ Prajeet Nair
Spear-Phishing Campaign Distributes Nim-Based Malware
BazarNimrod
2021-03-11 ⋅ Cyborg Security ⋅ Josh Campbell
You Don't Know the HAFNIUM of it...
CHINACHOPPER Cobalt Strike PowerCat
2021-03-10 ⋅ Center for Security Studies (CSS) ⋅ Florian J. Egloff, Max Smeets
Publicly attributing cyber attacks: a framework
2021-03-10 ⋅ PICUS Security ⋅ Süleyman Özarslan
Tactics, Techniques, and Procedures (TTPs) Used by HAFNIUM to Target Microsoft Exchange Servers
CHINACHOPPER
2021-03-10 ⋅ ⋅ NTT Security ⋅ Hiroki Hada
日本を標的としたPseudoGateキャンペーンによるSpelevo Exploit Kitを用いた攻撃について
Zloader
2021-03-09 ⋅ splunk ⋅ Security Research Team
Cloud Federated Credential Abuse & Cobalt Strike: Threat Research February 2021
Cobalt Strike
2021-03-06 ⋅ BLUEHEXAGON ⋅ Rohit Kashi
Blue Hexagon Security Advisory: Microsoft Exchange Server 0-days
2021-03-06 ⋅ Github (microsoft) ⋅ Microsoft
Security scripts
HAFNIUM
2021-03-05 ⋅ K7 Security ⋅ Arun Kumar S, Rajesh R
Sarbloh: The Ransomware With NO Demand
2021-03-03 ⋅ ⋅ GTSC ⋅ GTSC
'Mild' update on Microsoft Exchange 0day security vulnerability being used to attack organizations in Vietnam
ToddyCat
2021-03-02 ⋅ Metabase Q ⋅ Jesus Dominguez, Ocelot Offensive Security Team
Ploutus is back, targeting Itautec ATMs in Latin America
Ploutus ATM
2021-03-02 ⋅ Microsoft ⋅ MSRC Team
Multiple Security Updates Released for Exchange Server – updated March 8, 2021
HAFNIUM
2021-03-02 ⋅ Microsoft ⋅ Microsoft 365 Defender Threat Intelligence Team, Microsoft 365 Security, Microsoft Threat Intelligence Center (MSTIC)
HAFNIUM targeting Exchange Servers with 0-day exploits
CHINACHOPPER HAFNIUM
2021-03-02 ⋅ Twitter (@MsftSecIntel) ⋅ Microsoft Security Intelligence
Tweet on Gootkit malware campaign
GootKit
2021-03-01 ⋅ Acronis ⋅ Acronis Security
Threat analysis: Dharma (CrySiS) ransomware
Dharma
2021-03-01 ⋅ State Security Department of the Republic of Lithuania ⋅ State Security Department of the Republic of Lithuania
National Threat Assessment 2021
2021-03-01 ⋅ FireEye ⋅ FireEye, Mandiant
ACCELLION, INC. File Transfer Appliance (FTA) Security Assessment
DEWMODE
2021-02-25 ⋅ Microsoft ⋅ Microsoft Identity Security Team
Microsoft open sources CodeQL queries used to hunt for Solorigate activity
SUNBURST
2021-02-25 ⋅ 360 Total Security ⋅ kate
DarkWorld Ransomware