Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-02-28 ⋅ Trellix ⋅ Taylor Mullins
Trellix Global Defenders: Analysis and Protections for BlackByte Ransomware
BlackByte
2022-02-28 ⋅ Bleeping Computer ⋅ Sergiu Gatlan
Meta: Ukrainian officials, military targeted by Ghostwriter hackers
Ghostwriter
2022-02-28 ⋅ Microsoft ⋅ MSRC Team
Cyber threat activity in Ukraine: analysis and resources
HermeticWiper IsaacWiper PartyTicket WhisperGate
2022-02-28 ⋅ Sophos ⋅ Sean Gallagher
Conti and Karma actors attack healthcare provider at same time through ProxyShell exploits
Conti Karma
2022-02-28 ⋅ Lab52 ⋅ Jagaimo Kawaii
Looking for Penquins in the Wild
Penquin Turla
2022-02-28 ⋅ AhnLab ⋅ ASEC Analysis Team
CoinMiner Being Distributed to Vulnerable MS-SQL Servers
2022-02-28 ⋅ AhnLab ⋅ ASEC Analysis Team
Change in Distribution Method of Malware Disguised as Estimate (VBS Script)
Formbook
2022-02-28 ⋅ Stairwell ⋅ Steve Miller
Quick n’ dirty detection research: Building a labeled malware corpus for YARA testing
2022-02-28 ⋅ NSHC ⋅ NSHC Threatrecon Team
Threat Actor targeted attack against Finance and Investment industry (ENG)
2022-02-28 ⋅ Medium arnozobec ⋅ Arnaud Zobec
Analyzing conti-leaks without speaking russian — only methodology
Conti
2022-02-28 ⋅ Microsoft Sentinel 101 ⋅ mzorich
Detecting malware kill chains with Defender and Microsoft Sentinel
HermeticWiper
2022-02-28 ⋅ Bleeping Computer ⋅ Bill Toulas
Chinese cyberspies target govts with their ‘most advanced’ backdoor
Daxin
2022-02-28 ⋅ Github (TheParmak) ⋅ TheParmak
conti-leaks-englished
Conti
2022-02-28 ⋅ Symantec ⋅ Threat Hunter Team
Daxin: Stealthy Backdoor Designed for Attacks Against Hardened Networks
Daxin
2022-02-27 ⋅ Bleeping Computer ⋅ Lawrence Abrams
Conti ransomware's internal chats leaked after siding with Russia
Conti
2022-02-27 ⋅ The Record ⋅ Catalin Cimpanu
Conti ransomware gang chats leaked by pro-Ukraine member
Conti LockBit
2022-02-26 ⋅ Aon ⋅ Eduardo Mattos, Rob Homewood
Yours Truly, Signed AV Driver: Weaponizing An Antivirus Driver
Cuba KillAV
2022-02-26 ⋅ Mandiant ⋅ Mandiant
TRENDING EVIL Q1 2022
KEYPLUG FAKEUPDATES GootLoader BazarBackdoor QakBot
2022-02-26 ⋅ Yoroi ⋅ Carmelo Ragusa, Luca Mella, Luigi Martire
DiskKill/HermeticWiper, a disruptive cyber-weapon targeting Ukraine’s critical infrastructures
HermeticWiper
2022-02-26 ⋅ Seguranca Informatica ⋅ Pedro Tavares
The hidden C2: Lampion trojan release 212 is on the rise and using a C2 server for two years
lampion