Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-03-01 ⋅ Twitter (@TheDFIRReport) ⋅ The DFIR Report
Twitter thread with highlights from conti leaks
Conti
2022-03-01 ⋅ Kaspersky ⋅ GReAT
Elections GoRansom – a smoke screen for the HermeticWiper attack
PartyTicket
2022-03-01 ⋅ Akamai ⋅ Security Intelligence Response Team
TCP Middlebox Reflection: Coming to a DDoS Near You
2022-03-01 ⋅ Marco Ramilli's Blog ⋅ Marco Ramilli
DiskKill/HermeticWiper and NotPetya (Dis)similarities
EternalPetya HermeticWiper
2022-03-01 ⋅ Google ⋅ Google Threat Analysis Group, Shane Huntley
TAG Bulletin: Q1 2022
2022-03-01 ⋅ Medium whickey000 ⋅ Wade Hickey
How I Cracked CONTI Ransomware Group’s Leaked Source Code ZIP File
Conti
2022-03-01 ⋅ ESET Research ⋅ ESET Research
IsaacWiper and HermeticWizard: New wiper and worm targeting Ukraine
HermeticWiper IsaacWiper PartyTicket
2022-03-01 ⋅ Twitter (@ContiLeaks) ⋅ ContiLeaks
Tweet on Emotet final server scheme
Emotet
2022-03-01 ⋅ Cleafy ⋅ Cleafy
TeaBot is now spreading across the globe
Anatsa
2022-02-28 ⋅ Bleeping Computer ⋅ Sergiu Gatlan
Meta: Ukrainian officials, military targeted by Ghostwriter hackers
Ghostwriter
2022-02-28 ⋅ Microsoft ⋅ MSRC Team
Cyber threat activity in Ukraine: analysis and resources
CaddyWiper DesertBlade DoubleZero HermeticWiper INDUSTROYER2 IsaacWiper PartyTicket WhisperGate DEV-0586
2022-02-28 ⋅ NCSC UK ⋅ NCSC UK
Malware Analysis Report: SparrowDoor
SparrowDoor GhostEmperor
2022-02-28 ⋅ Trellix ⋅ Taylor Mullins
Trellix Global Defenders: Analysis and Protections for RagnarLocker Ransomware
RagnarLocker RagnarLocker
2022-02-28 ⋅ Twitter (@struppigel) ⋅ Karsten Hahn
Tweet on Gofing discovery
Gofing
2022-02-28 ⋅ Reuters ⋅ Christopher Bing
New Chinese hacking tool found, spurring U.S. warning to allies
Daxin
2022-02-28 ⋅ Cyber Geeks ⋅ Vlad Pasca
How to Analyze Malicious Documents – Case Study of an Attack Targeting Ukrainian Organization
2022-02-28 ⋅ Twitter (@M_haggis) ⋅ The Haag
Tweet on parsing Daxin driver metadata using powershell
Daxin
2022-02-28 ⋅ ZDNet ⋅ Jonathan Greig
Microsoft finds FoxBlade malware on Ukrainian systems, removes RT from Windows app store
HermeticWiper
2022-02-28 ⋅ ⋅ ASEC ⋅ ASEC
Remcos RAT malware disseminated by pretending to be tax invoices
Remcos
2022-02-28 ⋅ Trellix ⋅ Taylor Mullins
Trellix Global Defenders: Cyberattacks Targeting Ukraine and HermeticWiper Protections
HermeticWiper