Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-07-30 ⋅ Twitter (@Unit42_Intel) ⋅ Unit 42
Tweet on BazarLoader infection leading to cobaltstrike and Powershell script file for PrintNightmare vulnerability
BazarBackdoor Cobalt Strike
2021-07-30 ⋅ Bleeping Computer ⋅ Sergiu Gatlan
DOJ: SolarWinds hackers breached emails from 27 US Attorneys’ offices
2021-07-30 ⋅ RiskIQ ⋅ Team Atlas
Bear Tracks: Infrastructure Patterns Lead to More Than 30 Active APT29 C2 Servers
elf.wellmess WellMess
2021-07-29 ⋅ Microsoft ⋅ Microsoft 365 Defender Threat Intelligence Team
When coin miners evolve, Part 2: Hunting down LemonDuck and LemonCat attacks
Lemon Duck
2021-07-29 ⋅ Kaspersky ⋅ Kaspersky
GhostEmperor: Chinese-speaking APT targets high-profile victims using unknown rootkit
GhostEmperor
2021-07-29 ⋅ Talos Intelligence ⋅ Andrew Windsor, Chris Neal
Talos Spotlight: Solarmarker
solarmarker
2021-07-29 ⋅ Avast ⋅ Jan Vojtěšek
Magnitude Exploit Kit: Still Alive and Kicking
Magniber
2021-07-29 ⋅ Recorded Future ⋅ Insikt Group®
“Beijing One Pass” Employee Benefits Software Exhibits Spyware Characteristics
2021-07-29 ⋅ 360 Total Security ⋅ kate
“Netfilter Rootkit II ” Continues to Hold WHQL Signatures
NetfilterRootkit
2021-07-29 ⋅ ENISA ⋅ Apostolos Malatras, Eleni Tsekmezoglou, Ifigeneia Lella, Konstantinos Moulinos, Marianthi Theocharidou, Sebastian García, Veronica Valeros, Volker Distelrath
ENISA Threat Landscape for Supply Chain Attacks
2021-07-29 ⋅ Rasta Mouse ⋅ Rasta Mouse
NTLM Relaying via Cobalt Strike
Cobalt Strike
2021-07-28 ⋅ Threatpost ⋅ Lisa Vaas
BlackMatter & Haron: Evil Ransomware Newborns or Rebirths
Haron Ransomware
2021-07-28 ⋅ Malwarebytes ⋅ Hossein Jazi
Crimea “manifesto” deploys VBA Rat using double attack vectors
2021-07-28 ⋅ Corelight ⋅ Yacin Nadji
Telegram Zeek, you’re my main notice
2021-07-28 ⋅ RiskIQ ⋅ Jennifer Grob, Jordan Herman
Use of XAMPP Web Component to Identify Agent Tesla Infrastructure
Agent Tesla
2021-07-28 ⋅ KELA ⋅ Victoria Kivilevich
New Russian-Speaking Forum – A New Place for RaaS?
Babuk
2021-07-28 ⋅ McAfee ⋅ Noël Keijzer, Thibault Seret
Babuk: Moving to VM and *nix Systems Before Stepping Away
Babuk
2021-07-28 ⋅ CISA ⋅ Australian Cyber Security Centre (ACSC), CISA, FBI, NCSC UK
Top Routinely Exploited Vulnerabilities
2021-07-28 ⋅ Proofpoint ⋅ Crista Giering, Joshua Miller, Michael Raggi
I Knew You Were Trouble: TA456 Targets Defense Contractor with Alluring Social Media Persona
Liderc SysKit
2021-07-27 ⋅ Bitdefender ⋅ Martin Zugec, Victor Vrabie
Deep dive into a FIN8 attack – A forensic investigation