Click here to download all references as Bib-File.•
| 2022-03-11
⋅
propublica
⋅
Infamous Russian Troll Farm Appears to Be Source of Anti-Ukraine Propaganda |
| 2022-03-11
⋅
Netskope
⋅
New Formbook Campaign Delivered Through Phishing Emails Formbook |
| 2022-03-11
⋅
Varonis
⋅
Is this SID taken? Varonis Threat Labs Discovers Synthetic SID Injection Attack |
| 2022-03-11
⋅
Microsoft
⋅
Part 2: LockBit 2.0 ransomware bugs and database recovery attempts LockBit |
| 2022-03-11
⋅
Microsoft
⋅
Part 1: LockBit 2.0 ransomware bugs and database recovery attempts LockBit |
| 2022-03-11
⋅
Bleeping Computer
⋅
LockBit ransomware gang claims attack on Bridgestone Americas LockBit |
| 2022-03-11
⋅
Security Boulevard
⋅
IsaacWiper Followed HermeticWiper Attack on Ukraine Orgs HermeticWiper IsaacWiper |
| 2022-03-11
⋅
⋅
Cyberattack on Ukrainian state authorities using the Cobalt Strike Beacon (CERT-UA#4145) Cobalt Strike |
| 2022-03-11
⋅
Malware Posing as Russia DDoS Tool Bites Ukraine Hackers |
| 2022-03-10
⋅
Blackberry
⋅
Threat Thursday: CryptBot Infostealer Masquerades as Cracked Software CryptBot |
| 2022-03-10
⋅
Talos
⋅
Iranian linked conglomerate MuddyWater comprised of regionally focused subgroups STARWHALE |
| 2022-03-10
⋅
Brandefense
⋅
HermeticWiper - Technical Analysis Report HermeticWiper |
| 2022-03-10
⋅
BrightTALK (Kaspersky GReAT)
⋅
BrightTALK: A look at current cyberattacks in Ukraine HermeticWiper HermeticWizard IsaacWiper PartyTicket WhisperGate |
| 2022-03-10
⋅
splunk
⋅
Detecting HermeticWiper HermeticWiper PartyTicket |
| 2022-03-10
⋅
Recorded Future
⋅
Inside China’s National Defense Mobilization Reform: Capacity Surveys, Mobilization Resources, and “New-Type” Militias |
| 2022-03-10
⋅
Rootdemon
⋅
Iranian Hackers Targeting Turkey and Arabian Peninsula in New Malware Campaign STARWHALE |
| 2022-03-10
⋅
SecurityScorecard
⋅
SecurityScorecard Discovers new botnet, ‘Zhadnost,’ responsible for Ukraine DDoS attacks |
| 2022-03-10
⋅
cyble
⋅
AbereBot Returns as Escobar Aberebot |
| 2022-03-10
⋅
Twitter (@Katechondic)
⋅
Tweet on additional computer names "desktop-g1i8n3f" & "desktop-j6llo2k", seen with Crimson RAT C2 infrastructure used by APT36 Crimson RAT |
| 2022-03-10
⋅
Twitter (@teamcymru_S2)
⋅
Tweet on Crimson RAT infrastructure used by APT36 Crimson RAT |