Click here to download all references as Bib-File.•
| 2025-12-19
⋅
PolySwarm Tech Team
⋅
Multiple Threat Actors Leveraging CVE-2025-55182 (React2Shell) ANGRYREBEL COMPOOD MINOCAT Mirai SNOWLIGHT XMRIG EtherRAT Cobalt Strike Mirai VShell xmrig JACKPOT PANDA |
| 2025-12-19
⋅
Botbrawl
⋅
Chinese APT LongNosedGoblin Targets Government Networks in Southeast Asia and Japan NosyDownloader LongNosedGoblin |
| 2025-12-19
⋅
Intezer
⋅
Tracing a Paper Werewolf campaign through AI-generated decoys and Excel XLLs EchoGather |
| 2025-12-19
⋅
cyble
⋅
Stealth in Layers: Unmasking the Loader used in Targeted Email Campaigns DCRat Katz Stealer PhantomVAI PureLogs Stealer Remcos XWorm |
| 2025-12-18
⋅
Proofpoint
⋅
Access granted: phishing with device code authorization for account takeover TA2723 UNK_AcademicFlare |
| 2025-12-18
⋅
HelpNetSecurity
⋅
Clipping Scripted Sparrow’s wings: Tracking a global phishing ring Scripted Sparrow |
| 2025-12-18
⋅
Huntress Labs
⋅
A Series of Unfortunate (RMM) Events |
| 2025-12-18
⋅
Acronis
⋅
Acronis TRU Alliance {Hunt.io}: Hunting DPRK threats - New Global Lazarus & Kimsuky campaigns BADCALL POOLRAT Quasar RAT |
| 2025-12-18
⋅
Gen Digital Inc
⋅
Gen Blogs | Defeating AuraStealer: Practical Deobfuscation Workflows for Modern Infostealers Aura Stealer |
| 2025-12-18
⋅
safebreach
⋅
Prince of Persia: A decade of Iranian Nation State APT Campaign Activity Infy Tonnerre |
| 2025-12-18
⋅
ESET Research
⋅
LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan NosyDownloader |
| 2025-12-18
⋅
Cyderes
⋅
From Loader to Looter: ACR Stealer Rides on Upgraded CountLoader ACR Stealer CountLoader |
| 2025-12-18
⋅
BlackPoint
⋅
New MintsLoader Variant Using Hashtable Obfuscation MintsLoader |
| 2025-12-17
⋅
BI.ZONE
⋅
Arcane Werewolf revamps its arsenal with Loki 2.1 implant Havoc Loki (Mythic) Mythic Likho |
| 2025-12-17
⋅
Reporters Without Borders
⋅
ResidentBat: A new spyware family used by Belarusian KGB ResidentBat |
| 2025-12-17
⋅
Recorded Future
⋅
PurpleBravo’s Targeting of the IT Software Supply Chain BeaverTail InvisibleFerret PylangGhost GolangGhost |
| 2025-12-17
⋅
Cisco Talos
⋅
UAT-9686 actively targets Cisco Secure Email Gateway and Secure Email and Web Manager UAT-9686 |
| 2025-12-17
⋅
Crystal Intelligence
⋅
How we proved North Korea’s blockchain malware campaign JADESNOW |
| 2025-12-17
⋅
XLab
⋅
Kimwolf Exposed: The Massive Android Botnet with 1.8 Million Infected Devices Kimwolf Aisuru |
| 2025-12-17
⋅
Recorded Future
⋅
BlueDelta’s Persistent Campaign Against UKR.NET |