Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-08-04 ⋅ CrowdStrike ⋅ CrowdStrike Intelligence Team, CrowdStrike IR, Falcon OverWatch Team
PROPHET SPIDER Exploits Oracle WebLogic to Facilitate Ransomware Activity
Cobalt Strike Egregor Mount Locker Prophet Spider
2021-08-04 ⋅ Security Intelligence ⋅ Allison Wikoff, Richard Emerson
ITG18: Operational Security Errors Continue to Plague Sizable Iranian Threat Group
LittleLooter
2021-08-03 ⋅ CrowdStrike ⋅ Eric Loui, Josh Reynolds, Michael DeCristofaro
Squashing SPIDERS: Threat Intelligence, Threat Hunting and Rapid Response Stops SQL Injection Campaign
2021-08-02 ⋅ ⋅ 360 Threat Intelligence Center ⋅ Advanced Threat Institute
Operation Hunting - The latest attack by the CNC (APT-C-48) has been revealed
2021-07-29 ⋅ Microsoft ⋅ Microsoft Defender Threat Intelligence
BazaCall: Phony call centers lead to exfiltration and ransomware
BazarBackdoor BazarCall
2021-07-29 ⋅ Microsoft ⋅ Microsoft 365 Defender Threat Intelligence Team
When coin miners evolve, Part 2: Hunting down LemonDuck and LemonCat attacks
Lemon Duck
2021-07-29 ⋅ Talos Intelligence ⋅ Andrew Windsor, Chris Neal
Talos Spotlight: Solarmarker
solarmarker
2021-07-29 ⋅ Microsoft ⋅ Microsoft 365 Defender Threat Intelligence Team
BazaCall: Phony call centers lead to exfiltration and ransomware
BazarBackdoor Cobalt Strike
2021-07-29 ⋅ ENISA ⋅ Apostolos Malatras, Eleni Tsekmezoglou, Ifigeneia Lella, Konstantinos Moulinos, Marianthi Theocharidou, Sebastian García, Veronica Valeros, Volker Distelrath
ENISA Threat Landscape for Supply Chain Attacks
2021-07-28 ⋅ RiskIQ ⋅ Jennifer Grob, Jordan Herman
Use of XAMPP Web Component to Identify Agent Tesla Infrastructure
Agent Tesla
2021-07-28 ⋅ SUCURI ⋅ Ben Martin
Stylish Magento Card Stealer loads Without Script Tags
2021-07-27 ⋅ Elastic ⋅ Elastic Security Intelligence & Analytics Team
Collecting and operationalizing threat data from the Mozi botnet
Mozi
2021-07-27 ⋅ ⋅ 360 Threat Intelligence Center ⋅ Advanced Threat Institute
Summary of Kimsuky's secret stealing activities in the first half of 2021
2021-07-27 ⋅ Blackberry ⋅ BlackBerry Research & Intelligence Team
Old Dogs New Tricks: Attackers Adopt Exotic Programming Languages
elf.wellmess ElectroRAT BazarNimrod Buer Cobalt Strike Remcos Snake TeleBot WellMess Zebrocy
2021-07-24 ⋅ Twitter (@MsftSecIntel) ⋅ Microsoft Security Intelligence
Tweet on attackers increasingly using HTML smuggling in phishing and other email campaigns to deliver Casbaneiro
Metamorfo
2021-07-24 ⋅ InfoSec Handlers Diary Blog ⋅ Xavier Mertens
Agent.Tesla Dropped via a .daa Image and Talking to Telegram
Agent Tesla
2021-07-22 ⋅ Microsoft ⋅ Microsoft 365 Defender Threat Intelligence Team
When coin miners evolve, Part 1: Exposing LemonDuck and LemonCat, modern mining malware infrastructure
Lemon Duck
2021-07-22 ⋅ ⋅ Trend Micro ⋅ Katsuyuki Okamoto
Analysis of "[Urgent] Damage report regarding the occurrence of cyber attacks, etc. associated with the Tokyo Olympics.exe"
VIGILANT CLEANER
2021-07-16 ⋅ Silent Push ⋅ Silent Push
Attacks Are Tailored to You—Your Intelligence Should Be, Too.
2021-07-16 ⋅ PRODAFT Threat Intelligence ⋅ PRODAFT
Toddler - Mobile Banking Botnet Analysis Report
Anatsa