Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-12-06 ⋅ CERT-FR ⋅ CERT-FR
Phishing campaigns by the Nobelium intrusion set
Cobalt Strike
2021-12-04 ⋅ Theta ⋅ Hamish Krebs
Pivoting through malicious infrastructure: from ZoomPortable to Windscribe
2021-12-04 ⋅ BleepingComputer ⋅ Bill Toulas
Malicious KMSPico installers steal your cryptocurrency wallets
CryptBot
2021-12-03 ⋅ GoSecure ⋅ GoSecure Titan Labs
TrickBot Leverages Zoom Work from Home Interview Malspam, Heaven’s Gate and… Spamhaus?
TrickBot
2021-12-03 ⋅ HSE ⋅ HSE
Conti cyber attack on the HSE
Conti
2021-12-03 ⋅ Github (rivitna) ⋅ Andrey Zhdanov
Hive Demo and IoCs
Hive Hive
2021-12-03 ⋅ Cleafy ⋅ Cleafy
Mobile banking fraud: BRATA strikes again
BRATA
2021-12-03 ⋅ RiskIQ ⋅ Kelsey Clapp
Woo's There? Magecart Targets WooCommerce
magecart
2021-12-03 ⋅ Trend Micro ⋅ Nitesh Surana
Vulnerabilities Exploited for Monero Mining Malware Delivered via GitHub, Netlify
2021-12-03 ⋅ vmware ⋅ VMWare
TigerRAT – Advanced Adversaries on the Prowl
Tiger RAT
2021-12-03 ⋅ KrebsOnSecurity ⋅ Brian Krebs
Who Is the Network Access Broker ‘Babam’?
2021-12-03 ⋅ SANS ISC InfoSec Forums ⋅ Brad Duncan
TA551 (Shathak) pushes IcedID (Bokbot)
IcedID
2021-12-02 ⋅ FBI ⋅ FBI
CU-000156-MW: Indicators of Compromise Associated with Cuba Ransomware
Cuba
2021-12-02 ⋅ Google ⋅ Google Threat Analysis Group, Shane Huntley
TAG Bulletin: Q4 2021
2021-12-02 ⋅ Red Canary ⋅ Tony Lambert
KMSPico and Cryptbot: A spicy combo
CryptBot
2021-12-02 ⋅ Ankura ⋅ Vishal Thakur
Revix Linux Ransomware
REvil
2021-12-02 ⋅ CERT-FR ⋅ CERT-FR
Phishing Campaigns by the Nobelium Intrusion Set
Cobalt Strike
2021-12-02 ⋅ CISA ⋅ US-CERT
Alert (AA21-336A): APT Actors Exploiting CVE-2021-44077 in Zoho ManageEngine ServiceDesk Plus
KDC Sponge NGLite
2021-12-02 ⋅ Cisco ⋅ Tiago Pereira
Magnat campaigns use malvertising to deliver information stealer, backdoor and malicious Chrome extension
Azorult RedLine Stealer
2021-12-02 ⋅ ⋅ AhnLab ⋅ ASEC Analysis Team
Spreading AgentTesla through more sophisticated malicious PPT
Agent Tesla