Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2019-12-21 ⋅ Twitter (@zlab_team) ⋅ Z-Lab
Tweet on Possible New Threatactor
JSOutProx
2019-12-20 ⋅ Binary Defense ⋅ James Quinn
An Updated ServHelper Tunnel Variant
ServHelper
2019-12-19 ⋅ Youtube (FireEye Inc.) ⋅ Adrien Bataille, Anders Vejlby
Do You Know What's On Your Exchange Server?
LightNeuron
2019-12-19 ⋅ ⋅ VinCSS ⋅ m4n0w4r
[RE009] Analysis of malicious code "PLAN, KEY TASKS IN 2020.doc" attached to phishing email
Unidentified 074 (Downloader)
2019-12-19 ⋅ Fox-IT ⋅ Erik Schamper, Maarten van Dantzig
Operation Wocao: Shining a light on one of China’s hidden hacking groups
XServer
2019-12-19 ⋅ Malwarebytes ⋅ Jovi Umawing
Threat spotlight: the curious case of Ryuk ransomware
Ryuk
2019-12-19 ⋅ Fox-IT ⋅ Fox IT
Operation Wocao : Shining a light on one of China’s hidden hacking groups
APT20 Operation Wocao
2019-12-18 ⋅ US District Court for the Eastern District of Virginia
MICROSOFT CORPORATION, Plaintiff, v. JOHN DOES 1-2, CONTROLLING A COMPUTER NETWORK THEREBY INJURING PLAINTIFF AND ITS CUSTOMERS
BabyShark Kimsuky
2019-12-18 ⋅ Hatching.io ⋅ Pete Cowman
Understanding Ransomware Series: Detecting Sodin
REvil
2019-12-17 ⋅ Blueliv ⋅ Adrián Ruiz, Blueliv Labs Team, Jose Miguel Esparza
TA505 evolves ServHelper, uses Predator The Thief and Team Viewer Hijacking
ServHelper TA505
2019-12-17 ⋅ Cisco ⋅ Dave Liebenberg, JJ Cummings
Incident Response lessons from recent Maze ransomware attacks
Maze
2019-12-17 ⋅ Palo Alto Networks Unit 42 ⋅ Jen Miller-Osborn, Mike Harbison
Rancor: Cyber Espionage Group Uses New Custom Malware to Attack Southeast Asia
DDKONG Derusbi KHRAT
2019-12-17 ⋅ ⋅ Netlab ⋅ GenShen Ye, Jinye
Lazarus Group uses Dacls RAT to attack Linux platform
Dacls Log Collector Dacls
2019-12-16 ⋅ Trend Micro ⋅ Aliakbar Zahravi
Momentum Botnet's Newest DDoS Attacks and IoT Exploits
Momentum
2019-12-16 ⋅ KrebsOnSecurity ⋅ Brian Krebs
Ransomware Gangs Now Outing Victim Businesses That Don’t Pay Up
Maze
2019-12-15 ⋅ Bleeping Computer ⋅ Lawrence Abrams
Ryuk Ransomware Likely Behind New Orleans Cyberattack
Ryuk
2019-12-13 ⋅ SonicWall ⋅ SonicWall
LALALA InfoStealer which comes with Batch and PowerShell scripting combo
LALALA Stealer
2019-12-13 ⋅ Threatpost ⋅ Tara Seals
Elegant sLoad Carries Out Spying, Payload Delivery in BITS
sLoad
2019-12-12 ⋅ Microsoft ⋅ Microsoft Threat Intelligence Center
GALLIUM: Targeting global telecom
CHINACHOPPER Ghost RAT HTran MimiKatz Poison Ivy GALLIUM
2019-12-12 ⋅ FireEye ⋅ Chi-en Shen, Oleg Bondarenko
Cyber Threat Landscape in Japan – Revealing Threat in the Shadow
Cerberus TSCookie Cobalt Strike Dtrack Emotet Formbook IcedID Icefog IRONHALO Loki Password Stealer (PWS) PandaBanker PLEAD POISONPLUG TrickBot BlackTech