Click here to download all references as Bib-File.•
2021-07-07
⋅
SUCURI
⋅
Magecart Swiper Uses Unorthodox Concatenation magecart |
2021-07-07
⋅
Twitter (@C0rk1_H)
⋅
Tweet on purplefox exploiting PrintNightmare (CVE-2021-34527) vulnerability in cryptocurrency mining campaign PurpleFox |
2021-07-07
⋅
Netskope
⋅
Netskope Threat Coverage: REvil REvil |
2021-07-07
⋅
CrowdStrike
⋅
How CrowdStrike Falcon Stops REvil Ransomware Used in the Kaseya Attack REvil |
2021-07-07
⋅
Trend Micro
⋅
BIOPASS RAT: New Malware Sniffs Victims via Live Streaming BIOPASS Cobalt Strike Derusbi |
2021-07-07
⋅
Elastic
⋅
Elastic Security prevents 100% of REvil ransomware samples REvil |
2021-07-07
⋅
Chainanalysis
⋅
Israeli Government Seizes Cryptocurrency Addresses Associated with Hamas Donation Campaigns |
2021-07-07
⋅
McAfee
⋅
Ryuk Ransomware Now Targeting Webservers Cobalt Strike Ryuk |
2021-07-07
⋅
Trustwave
⋅
Diving Deeper Into the Kaseya VSA Attack: REvil Returns and Other Hackers Are Riding Their Coattails Cobalt Strike REvil |
2021-07-07
⋅
ESET Research
⋅
Bandidos at large: A spying campaign in Latin America Bandook |
2021-07-07
⋅
Medium s2wlab
⋅
Deep analysis of KPOT Stealer KPOT Stealer |
2021-07-07
⋅
Talos
⋅
InSideCopy: How this APT continues to evolve its arsenal (Network IOCs) AllaKore Lilith NjRAT |
2021-07-07
⋅
Talos
⋅
InSideCopy: How this APT continues to evolve its arsenal (IOCs) AllaKore Lilith NjRAT |
2021-07-07
⋅
Talos
⋅
InSideCopy: How this APT continues to evolve its arsenal AllaKore Lilith NjRAT |
2021-07-07
⋅
Kaspersky
⋅
WildPressure targets the macOS platform Guard Milum WildPressure |
2021-07-07
⋅
Intezer
⋅
Global Phishing Campaign Targets Energy Sector and its Suppliers |
2021-07-07
⋅
Talos Intelligence
⋅
InSideCopy: How this APT continues to evolve its arsenal AllaKore NjRAT SideCopy |
2021-07-06
⋅
Heimdal Security
⋅
Is Diavol Ransomware Connected to Wizard Spider? Diavol |
2021-07-06
⋅
Zscaler
⋅
Kaseya Supply Chain Ransomware Attack - Technical Analysis of the REvil Payload REvil |
2021-07-06
⋅
Twitter (@_alex_il_)
⋅
Tweet on REvil ransomware actor using vulnerable defender executable in its infection flow in early may before Kaseya attack REvil |