Click here to download all references as Bib-File.•
| 2020-12-22
⋅
CrowdStrike
⋅
Leftover Lunch: Finding, Hunting and Eradicating Spicy Hot Pot, a Persistent Browser Hijacking Rootkit Spicy Hot Pot |
| 2020-12-22
⋅
Symantec
⋅
SolarWinds Attacks: Stealthy Attackers Attempted To Evade Detection SUNBURST |
| 2020-12-22
⋅
AhnLab
⋅
Magniber Ransomware Changed Vulnerability (CVE-2019-1367 -> CVE-2020-0968) and Attempted to Bypass Behavior Detection Magniber |
| 2020-12-21
⋅
Silent Push
⋅
Investigating Crimeware Name Servers |
| 2020-12-21
⋅
Fortinet
⋅
What We Have Learned So Far about the “Sunburst”/SolarWinds Hack Cobalt Strike SUNBURST TEARDROP |
| 2020-12-21
⋅
IronNet
⋅
Russian cyber attack campaigns and actors WellMail elf.wellmess Agent.BTZ BlackEnergy EternalPetya Havex RAT Industroyer Ryuk Triton WellMess |
| 2020-12-21
⋅
Microsoft
⋅
Solorigate Resource Center SUNBURST TEARDROP |
| 2020-12-21
⋅
Intezer
⋅
Top Linux Cloud Threats of 2020 AgeLocker AnchorDNS Blackrota Cloud Snooper Dacls Doki FritzFrog IPStorm Kaiji Kinsing NOTROBIN Penquin Turla PLEAD Prometei RansomEXX Stantinko TeamTNT TSCookie WellMail elf.wellmess TeamTNT |
| 2020-12-21
⋅
US Court of Appeals for the Ninth Court
⋅
Case: 20-16408: WhatsApp et al. vs NSO Group |
| 2020-12-21
⋅
Microsoft
⋅
Understanding "Solorigate"'s Identity IOCs - for Identity Vendors and their customers. SUNBURST |
| 2020-12-21
⋅
Bloomberg
⋅
SolarWinds Adviser Warned of Lax Security Years Before Hack |
| 2020-12-21
⋅
SophosLabs Uncut
⋅
How SunBurst malware does defense evasion SUNBURST UNC2452 |
| 2020-12-20
⋅
CitizenLab
⋅
The Great iPwn Journalists Hacked with Suspected NSO Group iMessage ‘Zero-Click’ Exploit Chrysaor |
| 2020-12-20
⋅
CBS News
⋅
Transcript: Kevin Mandia on "Face the Nation," December 20, 2020 |
| 2020-12-19
⋅
Cyber And Ramen blog
⋅
Persistence Pays Off: A Brief Look at BlackTech’s 2020 PLEAD TSCookie PLEAD |
| 2020-12-19
⋅
VinCSS
⋅
[RE018-1] Analyzing new malware of China Panda hacker group used to attack supply chain against Vietnam Government Certification Authority - Part 1 SManager |
| 2020-12-19
⋅
VinCSS
⋅
[RE017-2] Phân tích kỹ thuật dòng mã độc mới được sử dụng để tấn công chuỗi cung ứng nhắm vào Ban Cơ yếu Chính phủ Việt Nam của nhóm tin tặc Panda Trung Quốc (Phần 2) SManager |
| 2020-12-19
⋅
Bleeping Computer
⋅
The SolarWinds cyberattack: The hack, the victims, and what we know SUNBURST |
| 2020-12-19
⋅
The Washington Post
⋅
Trump, contradicting Pompeo, downplays gravity of massive cyberattack against U.S. government, as well as Russia’s role |
| 2020-12-18
⋅
IBM
⋅
SUNBURST indicator detection in QRadar SUNBURST |