Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2025-11-13 ⋅ Israel National Digital Agency ⋅ Adi Pick, Hila David, Idan Beit-Yosef, Shimi Cohen, Yaniv Goldman
SpearSpecter: Unmasking Iran’s IRGC Cyber Operations Targeting High-Profile Individuals
TAMECAT
2025-11-12 ⋅ ISC ⋅ Brad Duncan
SmartApeSG campaign uses ClickFix page to push NetSupport RAT
SmartApeSG NetSupportManager RAT
2025-11-10 ⋅ Mandiant ⋅ Bill Glynn, Kevin O'Flynn, Praveeth DSouza, Stallone D'Souza, Yash Gupta
No Place Like Localhost: Unauthenticated Remote Access via Triofox Vulnerability CVE-2025-12480
UNC6485
2025-11-07 ⋅ ENKI ⋅ ENKI
Lazarus Group targets Aerospace and Defense with new Comebacker variant
ComeBacker
2025-11-05 ⋅ ESET Research ⋅ ESET Research
ESET APT Activity Report (April 2025 – September 2025): Russia-Aligned APTs Ramp Up Attacks Against Ukraine and Its Strategic Partners
BACKORDER BloodAlchemy ImprudentCook RokRAT ScoringMathTea
2025-11-05 ⋅ Google ⋅ Google Threat Intelligence Group
GTIG AI Threat Tracker: Advances in Threat Actor Usage of AI Tools
PromptLock UNC1069
2025-11-05 ⋅ KrebsOnSecurity ⋅ Brian Krebs
Cloudflare Scrubs Aisuru Botnet from Top Domains List
Aisuru
2025-11-04 ⋅ LevelBlue ⋅ Serhii Melnyk
Scattered LAPSUS$ Hunters: Anatomy of a Federated Cybercriminal Brand
Scattered Lapsus Hunters
2025-11-04 ⋅ The Record ⋅ Jonathan Greig
Treasury sanctions 8 for laundering North Korea earnings from cybercrime, IT worker scheme
2025-11-03 ⋅ Breached Company ⋅ Breached Company
When the Defenders Become the Attackers: Cybersecurity Experts Indicted for BlackCat Ransomware Operations
BlackCat BlackCat
2025-11-03 ⋅ Seqrite ⋅ Sathwik Ram Prakki, Subhajeet Singha
Operation Peek-a-Baku: Silent Lynx APT makes sluggish shift to Dushanbe
Laplas (Reverseshell) SilentSweeper YoroTrooper
2025-10-31 ⋅ Security Magic ⋅ Luke Acha
SystemShock Loader
2025-10-31 ⋅ Seqrite ⋅ Sathwik Ram Prakki
Operation SkyCloak: Tor Campaign targets Military of Russia & Belarus
2025-10-31 ⋅ Expel ⋅ AARON WALTON
Certified OysterLoader: Tracking Rhysida ransomware gang activity via code-signing certificates
Broomstick
2025-10-30 ⋅ CybelAngel ⋅ Orlaith Traynor
Is RuskiNet the Next Big Russian Hacktivist Group
RuskiNet
2025-10-30 ⋅ Github (cocomelonc) ⋅ cocomelonc
Malware development trick 54: steal data via legit Angelcam API. Simple C example
2025-10-30 ⋅ Gen Digital ⋅ Alexandru-Cristian Bardaș
DPRK’s Playbook: Kimsuky’s HttpTroy and Lazarus’s New BLINDINGCAN Variant
ComeBacker DRATzarus NikiTeaR
2025-10-30 ⋅ Twitter (@DarkWebInformer) ⋅ Dark Web Informer
Tweet about Aisuru C2 being on top of Cloudflare Radar / Top100 domain
Aisuru
2025-10-29 ⋅ Palo Alto Networks Unit 42 ⋅ Chema Garcia, Kristopher Russo
Suspected Nation-State Threat Actor Uses New Airstalk Malware in a Supply Chain Attack
Airstalk CL-STA-1009
2025-10-29 ⋅ Qianxin ⋅ Acey9, Alex.Turing
Smoking Gun Uncovered: RPX Relay at PolarEdge’s Core Exposed
PolarEdge