Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2020-12-14 ⋅ TrustedSec ⋅ Nick Gilberti, Tyler Hudak
SolarWinds Orion and UNC2452 – Summary and Recommendations
SUNBURST
2020-12-14 ⋅ Trend Micro ⋅ Trend Micro Research
Egregor Ransomware Launches String of High-Profile Attacks to End 2020
Egregor
2020-12-14 ⋅ Palo Alto Networks Unit 42 ⋅ Unit 42
Threat Brief: SolarStorm and SUNBURST Customer Coverage
Cobalt Strike SUNBURST
2020-12-14 ⋅ Volexity ⋅ Damien Cash, Matthew Meltzer, Sean Koessel, Steven Adair, Thomas Lancaster, Volexity Threat Research
Dark Halo Leverages SolarWinds Compromise to Breach Organizations
SUNBURST
2020-12-14 ⋅ Palo Alto Networks Unit 42 ⋅ Unit42
PyMICROPSIA: New Information-Stealing Trojan from AridViper
2020-12-14 ⋅ Sophos ⋅ Richard Harang
Sophos-ReversingLabs (SOREL) 20 Million sample malware dataset
2020-12-14 ⋅ Cado Security ⋅ Christopher Doman
Responding to Solarigate
SUNBURST
2020-12-14 ⋅ Twitter (@KimZetter) ⋅ Kim Zetter
Tweet thread on microsoft report on Solarwind supply chain attack by UNC2452
SUNBURST
2020-12-13 ⋅ FireEye ⋅ Alex Berry, Alex Pennino, Alyssa Rahman, Andrew Archer, Andrew Rector, Andrew Thompson, Barry Vengerik, Ben Read, Ben Withnell, Chris DiGiamo, Christopher Glyer, Dan Perez, Dileep Jallepalli, Doug Bienstock, Eric Scales, Evan Reese, Fred House, Glenn Edwards, Ian Ahl, Isif Ibrahima, Jay Smith, John Gorman, John Hultquist, Jon Leathery, Lennard Galang, Marcin Siedlarz, Matt Dunwoody, Matthew McWhirt, Michael Sikorski, Microsoft, Mike Burns, Nalani Fraiser, Nick Bennett, Nick Carr, Nick Hornick, Nick Richard, Nicole Oppenheim, Omer Baig, Ramin Nafisi, Sarah Jones, Scott Runnels, Stephen Eckels, Steve Miller, Steve Stone, William Ballenthin
Highly Evasive Attacker Leverages SolarWinds Supply Chain to Compromise Multiple Global Victims With SUNBURST Backdoor
SUNBURST SUPERNOVA TEARDROP UNC2452
2020-12-13 ⋅ SlideShare (ChiEnAshleyShen) ⋅ Chi-en Shen, Steve Su
From ThreatHunting to Campaign Tracking
Xtreme RAT
2020-12-13 ⋅ CISA ⋅ CISA
Active Exploitation of SolarWinds Software
SUNBURST
2020-12-13 ⋅ Microsoft ⋅ Microsoft Security Intelligence
Trojan:MSIL/Solorigate.B!dha
SUNBURST
2020-12-13 ⋅ Microsoft ⋅ Microsoft Security Response Center
Customer Guidance on Recent Nation-State Cyber Attacks
2020-12-13 ⋅ Microsoft ⋅ John Lambert
Important steps for customers to protect themselves from recent nation-state cyberattacks
2020-12-13 ⋅ Department of Homeland Security ⋅ Department of Homeland Security
Mitigate SolarWinds Orion Code Compromise
2020-12-13 ⋅ Bleeping Computer ⋅ Lawrence Abrams
Intel's Habana Labs hacked by Pay2Key ransomware, data stolen
Pay2Key
2020-12-12 ⋅ Github (cdong1012) ⋅ Chuong Dong
ContiUnpacker: An automatic unpacker for Conti rasnomware
Conti
2020-12-12 ⋅ Medium 0xthreatintel ⋅ 0xthreatintel
Reversing QakBot [ TLP: White]
QakBot
2020-12-11 ⋅ Trend Micro ⋅ Marc Lanzendorfer
Investigating the Gootkit Loader
GootKit
2020-12-11 ⋅ Blackberry ⋅ BlackBerry Research and Intelligence team
MountLocker Ransomware-as-a-Service Offers Double Extortion Capabilities to Affiliates
Cobalt Strike Mount Locker