Click here to download all references as Bib-File.•
| 2025-04-03
⋅
ThreatMon
⋅
Ransomhub Group & New Betruger Backdoor Technical Malware Analysis Report |
| 2025-04-02
⋅
cocomelonc
⋅
MacOS malware persistence 9: emond (The Event Monitor Daemon). Simple C example |
| 2025-04-02
⋅
ANALYST1
⋅
Inside BlackBasta: Actor Profiles, Extortion Tactics & Finances Black Basta Black Basta |
| 2025-04-02
⋅
BushidoToken
⋅
Tracking Adversaries: EvilCorp, the RansomHub affiliate RansomHub |
| 2025-04-02
⋅
Intel 471
⋅
An in-depth look at Black Basta's TTPs Black Basta Black Basta |
| 2025-04-01
⋅
ANY.RUN
⋅
Salvador Stealer: New Android Malware That Phishes Banking Details & OTPs Salvador Stealer |
| 2025-04-01
⋅
Hunt.io
⋅
Same Russian-Speaking Threat Actor, New Tactics: Abuse of Cloudflare Services for Phishing and Telegram to Filter Victim IPs Pyramid |
| 2025-04-01
⋅
⋅
Cert-UA
⋅
UAC-0219: Cyber espionage using PowerShell stealer WRECKSTEEL (CERT-UA#14283) WRECKSTEEL UAC-0219 |
| 2025-04-01
⋅
ZW01f
⋅
Auto-color - Linux backdoor Auto-Color |
| 2025-03-31
⋅
Aikido
⋅
Malware hiding in plain sight: Spying on North Korean Hackers BeaverTail |
| 2025-03-31
⋅
Zscaler
⋅
Analyzing New HijackLoader Evasion Tactics HijackLoader |
| 2025-03-31
⋅
Sekoia
⋅
From Contagious to ClickFake Interview: Lazarus leveraging the ClickFix tactic FrostyFerret GolangGhost GolangGhost |
| 2025-03-28
⋅
Cisco Talos
⋅
Gamaredon campaign abuses LNK files to distribute Remcos backdoor Remcos |
| 2025-03-28
⋅
SUCURI
⋅
Hidden Malware Strikes Again: Mu-Plugins Under Attack |
| 2025-03-28
⋅
Intrinsec
⋅
From espionage to PsyOps: Tracking operations and bulletproof providers of UACs in 2025 sLoad NetSupportManager RAT Remcos SmokeLoader |
| 2025-03-26
⋅
ThreatMon
⋅
Raton / Silly - Remote Access Trojan | Technical Malware Analysis Report AsyncRAT |
| 2025-03-25
⋅
IBM X-Force
⋅
IBM X-Force discovers new Sheriff Backdoor used to target Ukraine Deputy Sheriff |
| 2025-03-25
⋅
Resecurity
⋅
Blacklock Ransomware: A Late Holiday Gift with Intrusion into the Threat Actor's Infrastructure BlackLock |
| 2025-03-25
⋅
Inside Kimsuky’s Latest Cyberattack: Analyzing Malicious Scripts and Payloads |
| 2025-03-25
⋅
JPCERT/CC
⋅
Tempted to Classifying APT Actors: Practical Challenges of Attribution in the Case of Lazarus’s Subgroup |