Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2025-09-19 ⋅ SentinelOne ⋅ Alex Delamotte, Gabriel Bernadett-Shapiro, Vitaly Kamluk
Prompts as Code & Embedded Keys | The Hunt for LLM-Enabled Malware
Malterminal
2025-09-19 ⋅ Zscaler ⋅ Atinderpal Singh
Mitigating Risks from the Shai-Hulud NPM Worm
Shai-Hulud
2025-09-19 ⋅ BlackPoint ⋅ Caden Toellner, Nevan Beal, Sam Decker
KeyZero: A Custom PowerShell RAT
2025-09-19 ⋅ ESET Research ⋅ Matthieu Faou, Zoltán Rusnák
Gamaredon X Turla collab
PteroGraphin
2025-09-19 ⋅ zensec ⋅ zensec
Unmasking Akira: The ransomware tactics you can’t afford to ignore
Akira Akira
2025-09-18 ⋅ Recorded Future ⋅ Insikt Group
CopyCop Deepens Its Playbook with New Websites and Targets
Storm-1516
2025-09-18 ⋅ Hunt.io ⋅ Hunt.io
Tracking AsyncRAT via Trojanized ScreenConnect and Open Directories
AsyncRAT
2025-09-18 ⋅ Lumen ⋅ Black Lotus Labs
SystemBC – Bringing the Noise
SystemBC SystemBC
2025-09-17 ⋅ Bitdefender ⋅ Bogdan Zavadovschi
EggStreme Malware: Unpacking a New APT Framework Targeting a Philippine Military Company
STOWAWAY
2025-09-17 ⋅ GitLab ⋅ GitLab
Tech Note - BeaverTail variant distributed via malicious repositories and ClickFix lure
BeaverTail OtterCookie BeaverTail InvisibleFerret Beavertail GolangGhost
2025-09-16 ⋅ HUMAN ⋅ Adam Sell, Joao Marques, João Santos, Lindsay Kaye, Louisa Abel, Vikas Parthasarathy
Satori Threat Intelligence Alert: SlopAds Covers Fraud with Layers of Obfuscation
SlopAds
2025-09-16 ⋅ Wiz.io ⋅ Barak Sharoni, Merav Bar, Rami McCarthy
Shai-Hulud: Ongoing Package Supply Chain Worm Delivering Data-Stealing Malware
Shai-Hulud
2025-09-16 ⋅ Proofpoint ⋅ Greg Lesnewich, Mark Kelly, Nick Attfield, Proofpoint Threat Research Team
Going Underground: China-aligned TA415 Conducts U.S.-China Economic Relations Targeting Using VS Code Remote Tunnels
2025-09-16 ⋅ Infoblox ⋅ Infoblox Threat Intelligence Group
Deniability by Design: DNS-Driven Insights into a Malicious Ad Network
2025-09-16 ⋅ Sekoia ⋅ Amaury G., Charles M., Sekoia TDR
APT28 Operation Phantom Net Voxel
BEARDSHELL GRUNT SLIMAGENT
2025-09-15 ⋅ AhnLab ⋅ ASEC
From El Dorado to BlackLock: Inside a Fast-Rising RaaS Threat
BlackLock
2025-09-15 ⋅ Zscalar ⋅ ThreatLabZ research team
SmokeLoader Rises From the Ashes
SmokeLoader
2025-09-14 ⋅ cocomelonc ⋅ cocomelonc
Malware development: persistence - part 28. CertPropSvc registry hijack. Simple C/C++ example
2025-09-14 ⋅ Genians ⋅ Genians
AI-Driven Deepfake Military ID Fraud Campaign by Kimsuky APT
2025-09-13 ⋅ Koi Security ⋅ Yuval Ronen
WhiteCobra's Playbook Exposed: Critical Mistake Reveals 24-Extension Campaign Targeting VS Code and Cursor
WhiteCobra