Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-03-06 ⋅ BLUEHEXAGON ⋅ Rohit Kashi
Blue Hexagon Security Advisory: Microsoft Exchange Server 0-days
2021-03-06 ⋅ Click All the Things! Blog ⋅ Jamie Arndt
oleObject1.bin – OLe10nATive – shellcode
CloudEyE
2021-03-06 ⋅ de Volkskrant ⋅ Huib Modderkolk
Russian and Chinese hackers gained access to EMA
2021-03-05 ⋅ Trend Micro ⋅ Adi Peretz, Erick Thek, Trend Micro Research
Earth Vetala – MuddyWater Continues to Target Organizations in the Middle East
MuddyWater
2021-03-05 ⋅ K7 Security ⋅ Arun Kumar S, Rajesh R
Sarbloh: The Ransomware With NO Demand
2021-03-05 ⋅ Forcepoint ⋅ Kurt Natvig, Robert Neumann
Advancements in Invoicing - A highly sophisticated way to distribute ZLoader
Zloader
2021-03-05 ⋅ 360 netlab ⋅ GenShen Ye, JiaYu, Yanlong Ma
QNAP NAS users, make sure you check your system
QNAPCrypt
2021-03-05 ⋅ Malwarebytes ⋅ Hossein Jazi
New steganography attack targets Azerbaijan
2021-03-05 ⋅ Sophos ⋅ SOPHOS MTR
HAFNIUM: Advice about the new nation-state attack
2021-03-05 ⋅ Medium walmartglobaltech ⋅ Jason Reaves
A look at an Android bot from unpacking to DGA
FluBot
2021-03-05 ⋅ Reddit Crowdstrike ⋅ Andrew-CS
2021-03-05 - Cool Query Friday - Hunting For Renamed Command Line Programs
2021-03-05 ⋅ Blackberry ⋅ Codi Starks, Kevin Finnigin
ZeroLogon to Ransomware
Mailto
2021-03-05 ⋅ Pastebin (MALWAREQUINN) ⋅ MalwareQuinn
Hafnium Exchange Vuln Detection - KQL
HAFNIUM
2021-03-05 ⋅ Github (cert-lv) ⋅ Andrew Konst
Detect webshells dropped on Microsoft Exchange servers after 0day compromises
HAFNIUM
2021-03-05 ⋅ Wired ⋅ Andy Greenberg
Chinese Hacking Spree Hit an ‘Astronomical’ Number of Victims
CHINACHOPPER
2021-03-04 ⋅ Trend Micro ⋅ Don Ovid Ladores, Junestherry Salvador, Raphael Centeno
New in Ransomware: AlumniLocker, Humble Feature Different Extortion Techniques
2021-03-04 ⋅ CrowdStrike ⋅ The Falcon Complete Team
Falcon Complete Stops Microsoft Exchange Server Zero-Day Exploits
CHINACHOPPER HAFNIUM
2021-03-04 ⋅ Elastic ⋅ Devon Kerr
Detection and Response for HAFNIUM Activity
HAFNIUM
2021-03-04 ⋅ FireEye ⋅ Ben Read, Jonathan Leathery, Lindsay Smith
New SUNSHUTTLE Second-Stage Backdoor Uncovered Targeting U.S.-Based Entity; Possible Connection to UNC2452
UNC2452
2021-03-04 ⋅ F5 ⋅ Dor Nizar, Roy Moshailov
IcedID Banking Trojan Uses COVID-19 Pandemic to Lure New Victims
IcedID