Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-04-23 ⋅ CSIS ⋅ CSIS
Supply chain attack on the password manager Clickstudios - PASSWORDSTATE
Moserpass
2021-04-23 ⋅ Darktrace ⋅ Max Heinemeyer
APT35 ‘Charming Kitten' discovered in a pre-infected environment
2021-04-23 ⋅ CNBC ⋅ Eamon Javers
Axis of REvil: What we know about the hacker collective taunting Apple
REvil
2021-04-23 ⋅ GuidePoint Security ⋅ Drew Schmitt
Mount Locker Ransomware Steps up Counter-IR Capabilities, Hindering Efforts for Detection, Response and Investigation
Mount Locker
2021-04-22 ⋅ Lacework Labs
Sysrv-Hello Expands Infrastructure
Sysrv-hello
2021-04-22 ⋅ lacework ⋅ Chris Hall, Jared Stroud
Sysrv-Hello Expands Infrastructure
Sysrv-hello
2021-04-22 ⋅ Github (@cecio) ⋅ @red5heep
EMOTET: a State-Machine reversing exercise
Emotet
2021-04-22 ⋅ Twitter (@AltShiftPrtScn) ⋅ Peter Mackenzie
Twwet On TTPs seen in IR used by DOPPEL SPIDER
Cobalt Strike DoppelPaymer
2021-04-22 ⋅ Twitter (@ET_Labs) ⋅ ET Labs
Tweet on Lunar Builder exfiltrating data via Discord webhook
2021-04-22 ⋅ xorl %eax, %eax ⋅ Anastasios Pingios
A gentle introduction to building a threat intelligence team
2021-04-22 ⋅ The Record ⋅ Catalin Cimpanu
Nightmare week for security vendors: Now a Trend Micro bug is being exploited in the wild
2021-04-22 ⋅ Avast Decoded ⋅ David Zimmer
Binary Data Hiding in VB6 Executables
2021-04-22 ⋅ Trend Micro ⋅ Alfredo Oliveira, David Fiser
Tor-Based Botnet Malware Targets Linux Systems, Abuses Cloud Management Tools
2021-04-22 ⋅ The Record ⋅ Catalin Cimpanu
Ransomware gang wants to short the stock price of their victims
DarkSide
2021-04-22 ⋅ splunk ⋅ Dave Herrald, Drew Church, James Brodsky, John Stoner, Katie Brown, Marcus LaFerrera, Michael Natkin, Mick Baccio, Ryan Kovar
SUPERNOVA Redux, with a Generous Portion of Masquerading
SUPERNOVA
2021-04-22 ⋅ ⋅ BR.DE ⋅ Florian Flade, Hakan Tanriverdi
Der Mann in Merkels Rechner - Jagd auf Putins Hacker
2021-04-22 ⋅ Twitter (@AffableKraut) ⋅ Eric Brandel
A thread on possibly new magecart skimmer
magecart
2021-04-22 ⋅ Check Point ⋅ Omer Hofman
Turning Telegram toxic: ‘ToxicEye’ RAT is the latest to use Telegram for command & control
ToxicEye
2021-04-22 ⋅ Fortinet ⋅ Xiaopeng Zhang
Deep Analysis: FormBook New Variant Delivered in Phishing Campaign – Part II
Formbook
2021-04-22 ⋅ Cybereason ⋅ Lior Rochberger
Prometei Botnet Exploiting Microsoft Exchange Vulnerabilities
Prometei Prometei