Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-11-03 ⋅ Telsy ⋅ Telsy Research Team
Dissecting new AppleSeed backdoor of Kimsuky threat actor
Appleseed
2021-11-03 ⋅ Team Cymru ⋅ tcblogposts
Webinject Panel Administration: A Vantage Point into Multiple Threat Actor Campaigns - A Case Study on the Value of Threat Reconnaisance
DoppelDridex IcedID QakBot Zloader
2021-11-03 ⋅ Trend Micro ⋅ Alfredo Oliveira, David Fiser
TeamTNT Upgrades Arsenal, Refines Focus on Kubernetes and GPU Environments
TeamTNT
2021-11-02 ⋅ Twitter (@malwrhunterteam) ⋅ malwrhunterteam
Tweet on linux version of Hive Ransomware group's command to shut down ESXI VMs
Hive
2021-11-01 ⋅ Symantec ⋅ Threat Hunter Team
BlackMatter: New Data Exfiltration Tool Used in Attacks
ExMatter
2021-10-27 ⋅ CrowdStrike ⋅ Falcon OverWatch Team
Tales From the Cryptojacking Front Lines
2021-10-26 ⋅ Symantec ⋅ Threat Hunter Team
Almost 100 Organizations in Brazil Targeted with Banking Trojan
bancos
2021-10-26 ⋅ Microsoft ⋅ Detection and Response Team (DART)
Protect your business from password sprays with Microsoft DART recommendations
2021-10-25 ⋅ CrowdStrike ⋅ Falcon OverWatch Team
OverWatch Elite In Action: Prompt Call Escalation Proves Vital to Containing Attack
MimiKatz
2021-10-25 ⋅ lacework ⋅ Lacework Labs
TeamTNT Continues to Target Exposed Docker API
2021-10-22 ⋅ TEAMT5 ⋅ TeamT5
Assassinations of "MiniNinja" in Various APAC Countries
ToddyCat
2021-10-21 ⋅ Microsoft ⋅ Microsoft 365 Defender Threat Intelligence Team
Franken-phish: TodayZoo built from other phishing kits
2021-10-20 ⋅ AhnLab ⋅ ASEC Analysis Team
VNC Malware (TinyNuke, TightVNC) Used by Kimsuky Group
TinyNuke
2021-10-20 ⋅ Symantec ⋅ Threat Hunter Team
New Espionage Campaign Targets South East Asia
Unidentified 087
2021-10-20 ⋅ sonatype ⋅ Sonatype Security Research Team
Newly Found npm Malware Mines Cryptocurrency on Windows, Linux, macOS Devices
2021-10-20 ⋅ Proofpoint ⋅ Bryan Campbell, Proofpoint Threat Insight Team
TA551 Uses ‘SLIVER’ Red Team Tool in New Activity
2021-10-19 ⋅ NTT ⋅ Threat Detection Team Security division of NTT
The layered infrastructure operated by APT29
elf.wellmess
2021-10-18 ⋅ Symantec ⋅ Threat Hunter Team
Harvester: Nation-state-backed group uses new toolset to target victims in South Asia
Cobalt Strike Graphon
2021-10-15 ⋅ skyblue.team blog ⋅ skyblue team
Recovering registry hives encrypted by LockBit 2.0
LockBit
2021-10-14 ⋅ Symantec ⋅ Threat Hunter Team
New Yanluowang ransomware used in targeted attacks
Yanluowang