Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-03-29 ⋅ Medium (Cryptax) ⋅ Axelle Apvrille
Android/Flubot: preparing for a new campaign?
FluBot
2021-03-29 ⋅ The Record ⋅ Catalin Cimpanu
RedEcho group parks domains after public exposure
PlugX ShadowPad RedEcho
2021-03-29 ⋅ Associated Press ⋅ Alan Suderman
AP sources: SolarWinds hack got emails of top DHS officials
2021-03-29 ⋅ Hornetsecurity ⋅ Hornetsecurity Security Lab
Zloader email campaign using MHTML to download and decrypt XLS
Zloader
2021-03-29 ⋅ Dragos ⋅ Dragos
New ICS Threat Activity Group: STIBNITE
Poet RAT
2021-03-29 ⋅ InfoSec Handlers Diary Blog ⋅ Xavier Mertens
Jumping into Shellcode
2021-03-29 ⋅ The DFIR Report ⋅ The DFIR Report
Sodinokibi (aka REvil) Ransomware
Cobalt Strike IcedID REvil
2021-03-28 ⋅ KrebsOnSecurity ⋅ Brian Krebs
No, I Did Not Hack Your MS Exchange Server
2021-03-28 ⋅ PC's Xcetra Support ⋅ David Ledbetter
SunCrypt, PowerShell obfuscation, shellcode and more yara
SunCrypt
2021-03-27 ⋅ Github (StrangerealIntel) ⋅ Twitter (@Arkbird_SOLG)
Terraloader: Congrats, you have a new fake job!
TerraLoader
2021-03-27 ⋅ InfoSec Handlers Diary Blog ⋅ Guy Bruneau
Malware Analysis with elastic-agent and Microsoft Sandbox
2021-03-26 ⋅ SonicWall ⋅ SonicWall CaptureLabs Threats Research Team
China’s “Winnti” Spyder Module
Spyder
2021-03-26 ⋅ Trend Micro ⋅ Trend Micro
Alleged Members of Egregor Ransomware Cartel Arrested
Egregor QakBot
2021-03-26 ⋅ Twitter (@3xp0rtblog) ⋅ 3xp0rt
Tweet on Cypress Stealer
2021-03-26 ⋅ Bleeping Computer ⋅ Lawrence Abrams
Ransomware gang urges victims’ customers to demand a ransom payment
Clop
2021-03-26 ⋅ Palo Alto Networks Unit 42 ⋅ Aviv Sasson
20 Million Miners: Finding Malicious Cryptojacking Images in Docker Hub
2021-03-26 ⋅ Accenture ⋅ Eric Welling, Jeff Beley, Ryan Leininger
It's getting hot in here! Unknown threat group using Hades ransomware to turn up the heat on their victims
Hades
2021-03-26 ⋅ ⋅ Der Spiegel ⋅ Der Spiegel
Russian group "Ghostwriters" apparently attacked parliamentarians
2021-03-26 ⋅ Imperva ⋅ Daniel Johnston
Imperva Observes Hive of Activity Following Hafnium Microsoft Exchange Disclosures
CHINACHOPPER
2021-03-26 ⋅ MIT Technology Review ⋅ Patrick Howell O'Neill
Google’s top security teams unilaterally shut down a counterterrorism operation